Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@@ -15,7 +15,7 @@ jobs:
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
egress-policy: audit
- - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+ - uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
id: app-token
app-id: ${{ secrets.APP_ID }}
@@ -99,7 +99,7 @@ jobs:
uses: ./.github/actions/e2e
- id: create_token
if: always()
- uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+ uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
private-key: ${{ secrets.PRIVATE_KEY }}
@@ -27,7 +27,7 @@ jobs:
# Generate a GitHub App installation access token
- name: Generate token
id: generate_token
app-id: ${{ secrets.LGTM_APP_ID }}
private-key: ${{ secrets.LGTM_PRIVATE_KEY }}
@@ -25,7 +25,7 @@ jobs:
# See app.yml for an example app manifest
@@ -49,7 +49,7 @@ jobs:
# from running: we can create a PR but the tests won't run :/