From c14e0f58aa947ed8a2c93a619a99aa868325a169 Mon Sep 17 00:00:00 2001
From: Corvid Agent <95454608+corvid-agent@users.noreply.github.com>
Date: Wed, 2 Sep 2026 21:09:11 +0000
Subject: [PATCH] ci: pin CorvidLabs/trust to v1.2.0-rc.4

---
 .github/workflows/trust.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/trust.yml b/.github/workflows/trust.yml
index d0d89a9..d5eebc5 100644
--- a/.github/workflows/trust.yml
+++ b/.github/workflows/trust.yml
@@ -29,7 +29,7 @@ jobs:
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      - uses: CorvidLabs/trust@v1
+      - uses: CorvidLabs/trust@e0272543ad5c88ec75cea1e606cc2efa552af25b # v1.2.0-rc.4
         id: trust
 
       - name: Check managed agent rules