awslabs
diff --git a/‎.bandit-baseline.json‎
Lines changed: 0 additions & 20 deletions b/‎.bandit-baseline.json‎
Lines changed: 0 additions & 20 deletions
diff --git a/‎…EQUEST_TEMPLATE/pull_request_template.md‎ ‎.github/pull_request_template.md‎.github/PULL_REQUEST_TEMPLATE/pull_request_template.md renamed to .github/pull_request_template.md b/‎…EQUEST_TEMPLATE/pull_request_template.md‎ ‎.github/pull_request_template.md‎.github/PULL_REQUEST_TEMPLATE/pull_request_template.md renamed to .github/pull_request_template.md
diff --git a/‎.github/workflows/codeql.yml‎
Lines changed: 3 additions & 3 deletions b/‎.github/workflows/codeql.yml‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎.github/workflows/dependency-review.yml‎
Lines changed: 3 additions & 3 deletions b/‎.github/workflows/dependency-review.yml‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎.github/workflows/quality.yml‎
Lines changed: 3 additions & 7 deletions b/‎.github/workflows/quality.yml‎
Lines changed: 3 additions & 7 deletions
diff --git a/‎.github/workflows/scorecard-analysis.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/scorecard-analysis.yml‎
Lines changed: 1 addition & 1 deletion
@@ -73,7 +73,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     # Add any setup steps before running the `github/codeql-action/init` action.
     # This includes steps like installing compilers or runtimes (`actions/setup-node`
@@ -83,7 +83,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@74c8748a6f2dada2c01b25ae170d7858ac90f4af # v4.32.2
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -112,6 +112,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@74c8748a6f2dada2c01b25ae170d7858ac90f4af # v4.32.2
       with:
         category: "/language:${{matrix.language}}"
@@ -8,9 +8,9 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/dependency-review-action@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
         with:
-          config-file: amazon-ospo/dependency-review-config/default/dependency-review-config.yml@main
+          config-file: amazon-ospo/dependency-review-config/default/dependency-review-config.yml@8e4c9fdde54d2b7c6a3a28b97eddd26c4cd90a66 # main
           # # distlib
           # allow-dependencies-licenses: "pkg:pypi/distlib@0.4.0"
@@ -5,6 +5,7 @@ on:
     branches: [main]
   pull_request:
     branches: [main]
+  workflow_dispatch:
 permissions:
   actions: none
   attestations: none
@@ -29,18 +30,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup mise
-        uses: jdx/mise-action@v3
+        uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
         with:
           cache: true
 
-      - name: Install dprint
-        run: |
-          curl -fsSL https://dprint.dev/install.sh | sh
-          echo "$HOME/.dprint/bin" >> $GITHUB_PATH
-
       - name: Check formatting
         run: mise run fmt:check
 
 
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false