'Pin third-party actions to latest SHA'

vend · Oct 16, 2023 · 297dba7 · 297dba7
1 parent 272de86
commit 297dba7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/shiftleft-analysis.yml b/.github/workflows/shiftleft-analysis.yml
@@ -19,7 +19,7 @@ jobs:
     # 3. Invoke Scan with the github token. Leave the workspace empty to use relative url
 
     - name: Perform Scan
-      uses: ShiftLeftSecurity/scan-action@master
+      uses: ShiftLeftSecurity/scan-action@54980bbdae434b8e7903cfcffa98a2601c207962 # v1.3.0 scan-action is in maintenance mode only.
       env:
         WORKSPACE: ""
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}