ci(renovate): Automatically pin GitHub action digests

This should silence OpenSSF Scorecards warnings about a "GitHubAction not pinned by hash". Signed-off-by: Sebastian Schuberth <[email protected]>
oss-review-toolkit · Jul 11, 2024 · d271bd8 · d271bd8
1 parent e4aa9e9
commit d271bd8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/renovate.json b/renovate.json
@@ -3,6 +3,7 @@
   "extends": [
     "config:recommended",
     "docker:disable",
+    "helpers:pinGitHubActionDigests",
     ":semanticCommitScopeDisabled",
     ":semanticCommitTypeAll(deps)"
   ],