From 9ff422396a4ddfd880b76711c5265e2b06d7df1f Mon Sep 17 00:00:00 2001 From: Martin von Zweigbergk Date: Fri, 10 Mar 2023 08:54:01 -0800 Subject: [PATCH] github: pin version of codespell action by hash The security scanner complained about this. It is what we do with all other actions. --- .github/workflows/codespell.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index b615bc76d..a1da2e16f 100644 --- a/.github/workflows/codespell.yml +++ b/.github/workflows/codespell.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c - - uses: codespell-project/actions-codespell@v1 + - uses: codespell-project/actions-codespell@22ff5a2e4b591290baf82d47c9feadac31c65441 with: check_filenames: true check_hidden: true