Pin Token Exchange Version (#806)

This reduces our security risk
bufbuild · Mar 1, 2023 · 8ccd2bd · 8ccd2bd
1 parent 38260ee
commit 8ccd2bd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/version-bump.yaml b/.github/workflows/version-bump.yaml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92
         with:
           app_id: ${{ env.APP_ID }}
           private_key: ${{ secrets.TOKEN_EXCHANGE_GH_APP_PRIVATE_KEY }}