Pin contributors-readme-action to commit SHA for security

Pin third-party GitHub Action to specific commit SHA instead of
mutable branch reference to prevent potential supply chain attacks.
This commit is contained in:
mauvehed 2025-12-26 09:36:26 -06:00
parent 59f31e8506
commit 5070206cb3
No known key found for this signature in database

View file

@ -11,7 +11,7 @@ jobs:
name: Add contributors
steps:
- name: Updates readme with contributors
uses: akhilmhdh/contributors-readme-action@master
uses: akhilmhdh/contributors-readme-action@83ea0b4f1ac928fbfe88b9e8460a932a528eb79f # v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with: