From 4b4613ad1f4a9fc23b2ad7b8ff260920a8a45695 Mon Sep 17 00:00:00 2001
From: jportner <jportner@anthropic.com>
Date: Wed, 6 May 2026 18:43:50 +0000
Subject: [PATCH] Pin GitHub Actions to commit SHAs

---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index b408e8f..6fa9a0a 100644
--- a/action.yml
+++ b/action.yml
@@ -97,7 +97,7 @@ runs:
 
     - name: Install Bun
       if: inputs.path_to_bun_executable == ''
-      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # https://github.com/oven-sh/setup-bun/releases/tag/v2.2.0
+      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 — https://github.com/oven-sh/setup-bun/releases/tag/v2.2.0 (sha-pinned)
       with:
         bun-version: 1.3.6