pin nancy because latest tag lookup is failing

Signed-off-by: Steve Coffman <steve@khanacademy.org>
99designs · Mar 20, 2023 · ca42e5e · ca42e5e
1 parent aab9b96
commit ca42e5e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -18,3 +18,5 @@ jobs:
           go-version: ${{ matrix.go }}
       - run: go mod download && go list -json -deps all > go.list
       - uses: sonatype-nexus-community/nancy-github-action@main
+        with:
+          nancyVersion: "v1.0.42"