This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/struts.git


The following commit(s) were added to refs/heads/main by this push:
     new c407f7f55 ci: pin Scorecards checkout action by commit (#1966)
c407f7f55 is described below

commit c407f7f5524d372847639326bcb2e84eb435e689
Author: Robert McConnell <[email protected]>
AuthorDate: Sat Sep 19 00:53:32 2026 -0400

    ci: pin Scorecards checkout action by commit (#1966)
    
    Signed-off-by: Robert McConnell <[email protected]>
---
 .github/workflows/scorecards-analysis.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scorecards-analysis.yaml 
b/.github/workflows/scorecards-analysis.yaml
index 0220f68bb..93001da64 100644
--- a/.github/workflows/scorecards-analysis.yaml
+++ b/.github/workflows/scorecards-analysis.yaml
@@ -41,7 +41,7 @@ jobs:
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout@v7   # 3.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1    # 
7.0.1
         with:
           persist-credentials: false
 

Reply via email to