Pin actions/github-script by Git SHA (#1859)

martincostello · web-flow · commit 39a2af19d997 · 2025-08-17T17:17:04.000-04:00
Resolves #1858.
diff --git a/action.yml b/action.yml
@@ -223,7 +223,7 @@ runs:
         GITHUB_REPOSITORY: ${{ github.repository }}
 
     - name: Get OIDC token
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       id: oidc
       with:
         script: |
