From b7c88f0ca65a3feaff8d623a102ecdb4138c3f5c Mon Sep 17 00:00:00 2001
From: justinbanon-agent <justinbanon-agent@users.noreply.github.com>
Date: Wed, 21 Oct 2026 16:37:43 +0100
Subject: [PATCH] ci: pin third-party actions to exact commit SHAs

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/lint-pr.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/lint-pr.yaml b/.github/workflows/lint-pr.yaml
index 9041d5c..e468223 100644
--- a/.github/workflows/lint-pr.yaml
+++ b/.github/workflows/lint-pr.yaml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
       repository-projects: write
     steps:
-      - uses: amannn/action-semantic-pull-request@v5.5.2
+      - uses: amannn/action-semantic-pull-request@cfb60706e18bc85e8aec535e3c577abe8f70378e # v5.5.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with: