[StepSecurity] ci: Harden GitHub Actions (#61)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
alexaka1 · Aug 21, 2024 · 8d39da4 · 8d39da4
1 parent d41f308
commit 8d39da4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -167,7 +167,7 @@ jobs:
           git tag -a ${{ needs.check-release.outputs.version }} -m "Release ${{ needs.check-release.outputs.version }}"
           git push origin ${{ needs.check-release.outputs.version }}
       - name: Create GitHub release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8
         with:
           files: |
             ${{ github.workspace }}/artifacts/*.nupkg