From b24df57f4090537aa4573e7a1e256d9d07db15e7 Mon Sep 17 00:00:00 2001
From: AfterStory <105970725+AfterHistory@users.noreply.github.com>
Date: Wed, 15 Oct 2025 21:26:21 -0300
Subject: [PATCH] feat: swap to stepsecurity action for GPG

---
 .github/workflows/upstream-sync.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/upstream-sync.yml b/.github/workflows/upstream-sync.yml
index 8ccd8decda..36e8450cbd 100644
--- a/.github/workflows/upstream-sync.yml
+++ b/.github/workflows/upstream-sync.yml
@@ -34,7 +34,7 @@ jobs:
           fetch-depth: 0
 
       - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
+        uses: step-security/ghaction-import-gpg@69c854a83c7f79463f8bdf46772ab09826c560cd # v6.3.1
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.PASSPHRASE }}