From d6e62b031136cf3b7ca4cab6c74e17d66d6bd713 Mon Sep 17 00:00:00 2001 From: harshitghagre Date: Wed, 29 Apr 2026 17:48:09 +0530 Subject: [PATCH] Pin actions/github-script to commit SHA in first-time-contributor workflow Signed-off-by: harshitghagre --- .github/workflows/first-time-contributor.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/first-time-contributor.yaml b/.github/workflows/first-time-contributor.yaml index cd5eba69c4..d1d307daec 100644 --- a/.github/workflows/first-time-contributor.yaml +++ b/.github/workflows/first-time-contributor.yaml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Welcome first-time contributor - uses: actions/github-script@v7 + uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 with: script: | const owner = context.repo.owner;