From 298e2d2b76722b459aba171e4ec080bd661fe270 Mon Sep 17 00:00:00 2001 From: Chaitanya Bhorade Date: Mon, 17 Aug 2026 14:31:12 -0700 Subject: [PATCH] Pin maven-dependency-submission-action to commit SHA --- .github/workflows/dependency-cve-monitor.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-cve-monitor.yml b/.github/workflows/dependency-cve-monitor.yml index 00cc0b12e9cc..a52cc6d25b86 100644 --- a/.github/workflows/dependency-cve-monitor.yml +++ b/.github/workflows/dependency-cve-monitor.yml @@ -16,7 +16,7 @@ jobs: contents: write steps: - uses: actions/checkout@v6 - - uses: advanced-security/maven-dependency-submission-action@v5 + - uses: advanced-security/maven-dependency-submission-action@b275d12641ac2d2108b2cbb7598b154ad2f2cee8 # v5 with: maven-args: >- -DtransitiveExcludes=*:*