From 706cdebec67014d0e1e245df2000fc2df60ea72d Mon Sep 17 00:00:00 2001
From: updatecli <bot@updatecli.io>
Date: Tue, 7 Apr 2026 06:47:06 +0000
Subject: [PATCH] chore: deps(updatecli): bump
 "ghcr.io/updatecli/policies/zizmor/githu...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... baction/scaffold" policy to 0.7.0

Made with ❤️️ by updatecli
---
 updatecli-compose.yaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/updatecli-compose.yaml b/updatecli-compose.yaml
index 9549fec..d94b6b9 100644
--- a/updatecli-compose.yaml
+++ b/updatecli-compose.yaml
@@ -33,7 +33,7 @@ policies:
       - updatecli/values.d/updatecli_gha.yaml
 
   - name: Install Zizmor everywhere
-    policy: ghcr.io/updatecli/policies/zizmor/githubaction/scaffold:0.7.0
+    policy: ghcr.io/updatecli/policies/zizmor/githubaction/scaffold:0.7.0@sha256:42be158b93db998f4fa9a3b85477e43d2676f28ff2134e8ded4598713bbc58d8
     values:
       - updatecli/values.d/scm_githubsearch.yaml
     valuesinline:
@@ -41,4 +41,3 @@ policies:
         rules:
           secrets-outside-env:
             disable: true
-