fix tags for step-security/harden-runner

Signed-off-by: Spencer Schrock <[email protected]>
ossf · Dec 1, 2023 · 092d6e5 · 092d6e5
1 parent db199d8
commit 092d6e5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs