Pin signing workflow processes

GSA-TTS · Aug 26, 2024 · 013ffd8 · 013ffd8
1 parent 0e1c080
commit 013ffd8
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/megalinter.yml b/.github/workflows/megalinter.yml
@@ -9,6 +9,7 @@ on:
       - main
   workflow_dispatch:
 
+
 permissions:
   contents: read
 
@@ -38,7 +39,7 @@ jobs:
 
       - name: "Import GPG key"
         id: import-gpg
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # pin@v6
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.GPG_PRIVATE_KEY_PASSPHRASE }}