From 386df6da148e2f3ba30b095f43926d41d7975bf4 Mon Sep 17 00:00:00 2001 From: "stepsecurity-app[bot]" <188008098+stepsecurity-app[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 17:33:22 +0000 Subject: [PATCH] [StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2bf2d7f..a39dd98 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -177,14 +177,14 @@ jobs: - name: Wait for PR to be created id: pr if: inputs.dev == false && inputs.bumpVersion == true - uses: octokit/request-action@b91aabaa861c777dcdb14e2387e30eddf04619ae # v3.0.0 + uses: step-security/octokit-request-action@08f4100811cf1da063e5da53aad592beafc7d9de # v3.0.0 with: route: GET /repos/${{ github.repository }}/pulls?head=${{ github.repository_owner }}:${{ env.BRANCH_NAME }} # MERGE PR TO MAIN - name: Merge Pull Request if: inputs.dev == false && inputs.bumpVersion == true - uses: octokit/request-action@b91aabaa861c777dcdb14e2387e30eddf04619ae # v3.0.0 + uses: step-security/octokit-request-action@08f4100811cf1da063e5da53aad592beafc7d9de # v3.0.0 with: route: PUT /repos/${{ github.repository }}/pulls/${{ steps.create_pr.outputs.pull-request-number }}/merge merge_method: squash