[StepSecurity] ci: Harden GitHub Actions (#87)

Signed-off-by: StepSecurity Bot <[email protected]>
northwood-labs · Dec 18, 2023 · 8a17e7b · 8a17e7b
1 parent aa4e217
commit 8a17e7b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml
@@ -31,7 +31,7 @@ jobs:
           fetch-depth: 0
 
       - name: Check secrets with TruffleHog OSS
-        uses: trufflesecurity/[email protected]
+        uses: trufflesecurity/trufflehog@b0fab16ad4b5cc42c38ee4e2ee362aa3c47dea24 # v3.63.4
         with:
           path: ./
           head: HEAD