ci: pin aireceipts-cli@0.5.0 (supply-chain: no mutable @latest with write token)

anandgupta42 · anandgupta42 · commit f13c3a2e26f3 · 2026-07-07T22:38:12.000-07:00
diff --git a/.github/workflows/aireceipts.yml b/.github/workflows/aireceipts.yml
@@ -7,6 +7,6 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - run: npx -y aireceipts-cli@latest pr-check
+      - run: npx -y aireceipts-cli@0.5.0 pr-check
         env:
           GH_TOKEN: ${{ github.token }}
