# garnet-action-pin format=1 # Pin the Garnet GitHub Action by commit SHA. Floating tags (@v2, @v2.1.1) can move; SHAs cannot. # Source: GitHub API releases/latest for garnet-org/action FORMAT=1 OK=1 REPO=garnet-org/action RELEASE_TAG=v2 COMMIT_SHA=9e819143e63d6dda04bca2e90ac85e3cf0e5289d RELEASE_NAME=Garnet Runtime Security Action v2 RELEASE_URL=https://github.com/garnet-org/action/releases/tag/v2 MARKETPLACE_URL=https://github.com/marketplace/actions/garnet-runtime-visibility REPO_URL=https://github.com/garnet-org/action PUBLISHED_AT=2026-03-12T21:47:59Z FETCHED_AT=2026-04-14T22:33:28.363Z # YAML (workflow step) — replace your current uses: line with: uses: garnet-org/action@9e819143e63d6dda04bca2e90ac85e3cf0e5289d # GitHub Release v2