From a24a642a40bff40b157d7342661fe42f6a04e5d9 Mon Sep 17 00:00:00 2001 From: ChiefGyk3D <19499446+ChiefGyk3D@users.noreply.github.com> Date: Sun, 4 Oct 2026 08:43:30 -0400 Subject: [PATCH] ci(security): pin git-your-ship-together to v1.9.0; Snyk runs weekly MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit the security workflow pin only; the other GYST pins follow through Dependabot → v1.9.0. Snyk now runs on the weekly schedule and workflow_dispatch instead of every push to main: Snyk's free plan meters tests per month across the whole account and ten repositories on push spent a month's Snyk Code tests in a day (2026-10-04). Co-Authored-By: Claude Fable 5.1 --- .github/workflows/security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 540d0bb..5c411cf 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -17,7 +17,7 @@ permissions: jobs: security: - uses: ChiefGyk3D/git-your-ship-together/.github/workflows/security.yml@a9e0e136e7f448b6f6f350c16705e5bcc00f55d6 # v1.8.1 + uses: ChiefGyk3D/git-your-ship-together/.github/workflows/security.yml@9708d9d43bf0c27b8269c2387edc70c1efb22514 # v1.9.0 permissions: contents: read security-events: write