ci(renovate): Automatically pin GitHub action digests

This should silence OpenSSF Scorecard's "GitHubAction not pinned by hash" warning. Signed-off-by: Sebastian Schuberth <[email protected]>
oss-review-toolkit · Jul 11, 2024 · d881059 · d881059
1 parent b37ac5e
commit d881059
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/renovate.json b/renovate.json
@@ -3,6 +3,7 @@
   "extends": [
     "config:recommended",
     "docker:disable",
+    "helpers:pinGitHubActionDigests",
     ":semanticCommitScopeDisabled",
     ":semanticCommitTypeAll(deps)"
   ],