Bump install-pinned/uv from 75877ff4b6e7f7b75e572e664476f9a202dcc9f9 to 5b0ba1b2949207d1c7220019a44eb4e08bc0045d #112
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency review | |
| on: [pull_request] | |
| permissions: read-all | |
| jobs: | |
| dependency-review: | |
| name: Dependency review | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 | |
| with: | |
| disable-sudo: true | |
| egress-policy: block | |
| allowed-endpoints: > | |
| api.github.com:443 | |
| api.securityscorecards.dev:443 | |
| github.com:443 | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 | |
| - uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 |