Pin untrusted Github Action to a commit hash (#2279)

JoshMock · web-flow · commit e4a881c682b1 · 2023-08-28T10:19:03.000-05:00
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
@@ -11,6 +11,6 @@ jobs:
     name: Backport
     steps:
       - name: Backport
-        uses: tibdex/backport@v1
+        uses: tibdex/backport@7005ef85c4562bc23b0e9b4a9940d5922f439750 # v2
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
