From 39a2af19d997be74586469d4062e173ecae614f6 Mon Sep 17 00:00:00 2001
From: Martin Costello <martin@martincostello.com>
Date: Sun, 17 Aug 2025 22:17:04 +0100
Subject: [PATCH] Pin actions/github-script by Git SHA (#1859)

Resolves #1858.
---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 375b8b0..db668d4 100644
--- a/action.yml
+++ b/action.yml
@@ -223,7 +223,7 @@ runs:
         GITHUB_REPOSITORY: ${{ github.repository }}
 
     - name: Get OIDC token
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       id: oidc
       with:
         script: |