chore: apply security hardening to ci

[StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
sgammon · Sep 8, 2023 · 8b2f1b6 · 8b2f1b6
1 parent a8fa3cc
commit 8b2f1b6
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -19,3 +19,8 @@ updates:
     directory: /
     schedule:
       interval: daily
+
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: daily
diff --git a/.github/workflows/module.build.yml b/.github/workflows/module.build.yml
@@ -154,7 +154,7 @@ jobs:
         shell: bash
         run: bazel coverage --config=ci ${{ inputs.flags }} "//tools/..." "//tests/..." "//.aspect/..."
       - name: "Report: Coverage"
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
         if: inputs.coverage
         continue-on-error: true
         with: