We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5c2cc2d commit a0c309dCopy full SHA for a0c309d
.github/workflows/find-vulnerabilities.yml
@@ -23,7 +23,7 @@ jobs:
23
persist-credentials: false # do not keep the token around
24
25
- name: Fail on known vulnerabilities
26
- uses: aboutcode-org/scancode-action@6e900c920928c44932e756e308561451b09ec58b
+ uses: aboutcode-org/scancode-action@76777db8400d719de67ba3e465c5881037b45cb9 # v0.1
27
with:
28
pipelines: "inspect_packages:StaticResolver,find_vulnerabilities"
29
check-compliance: true
0 commit comments