Lock peter-evans/create-pull-request to v6.1.0's commit sha (#security)

Khan · Jul 18, 2024 · 6ec698d · 6ec698d
1 parent 9b5100d
commit 6ec698d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/maintenance.yml b/.github/workflows/maintenance.yml
@@ -35,7 +35,7 @@ jobs:
               run: npx update-browserslist@latest
 
             - name: Create Pull Request
-              uses: peter-evans/create-pull-request@v6
+              uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
               with:
                   token: ${{ secrets.GITHUB_TOKEN }}
                   team-reviewers: perseus, frontend-infra-web