Pin the actions/setup-python for the externally used action.yml (#2749)

cgravill · web-flow · commit 2d33864bafd3 · 2026-03-01T22:05:39.000Z
Pin the actions/setup-python to a known release
diff --git a/action.yml b/action.yml
@@ -28,7 +28,7 @@ branding:
 runs:
   using: composite
   steps:
-    - uses: actions/setup-python@v6
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
       id: python
       with:
         python-version: "3.11 - 3.14"
