Commit `f7136e4d4e`

f7136e4d4e92445a3e3ba5b748a6de39611d2659

parent: a57c7cd8f0

Unsigned

cmc <hello@cleberg.net> · 2026-08-07 08:38 UTC

Pin create-pull-request action to a commit SHA

SonarCloud (githubactions:S7637) flags third-party actions referenced by
mutable tag as a supply-chain risk; pin to the v7 commit SHA.

Layout: unified · split

.github/workflows/sync-man-pages.yml +1 −1

	@@ -40,7 +40,7 @@ jobs:
40	run: python3 scripts/sync_man_pages.py	40	run: python3 scripts/sync_man_pages.py
41		41
42	- name: Open pull request on change	42	- name: Open pull request on change
43	uses: peter-evans/create-pull-request@v7	43	uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7
44	with:	44	with:
45	add-paths: Hutch/Resources/man-pages.json	45	add-paths: Hutch/Resources/man-pages.json
46	branch: automated/man-page-catalog	46	branch: automated/man-page-catalog

Commit f7136e4d4e

Commit `f7136e4d4e`