From 9cf6ecf4d75e93d79a8c6e6c966c5feed9840c21 Mon Sep 17 00:00:00 2001
From: shreyah963 <shreyab963@gmail.com>
Date: Thu, 21 May 2026 09:34:56 -0700
Subject: [PATCH] Pin actions/github-script to exact commit SHA

Signed-off-by: shreyah963 <shreyab963@gmail.com>
---
 .github/workflows/add-untriaged.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/add-untriaged.yml b/.github/workflows/add-untriaged.yml
index 9482429..80a6de9 100644
--- a/.github/workflows/add-untriaged.yml
+++ b/.github/workflows/add-untriaged.yml
@@ -11,7 +11,7 @@ jobs:
   apply-label:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3
         with:
           script: |
             github.rest.issues.addLabels({