From ff4d17c1a2488fe5aa68029a8f2a7aee2a05a0a3 Mon Sep 17 00:00:00 2001 From: Pohan Huang Date: Wed, 1 Apr 2026 15:44:20 +0800 Subject: [PATCH] fix: pin rancher-eio/read-vault-secrets to new SHA Update rancher-eio/read-vault-secrets from 0da85151ad1f19ed7986c41587e45aac1ace74b6 to 7282bf97898cd1c16c89f837e0bb442e6d384c89 (v3) to comply with NV org policy requiring full-length commit SHA. --- .github/workflows/fossa.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml index 80c770c7..3ceed813 100644 --- a/.github/workflows/fossa.yml +++ b/.github/workflows/fossa.yml @@ -20,7 +20,7 @@ jobs: # The FOSSA token is shared between all repos in NeuVector's GH org. It can # be used directly and there is no need to request specific access to EIO. - name: Read FOSSA token - uses: rancher-eio/read-vault-secrets@0da85151ad1f19ed7986c41587e45aac1ace74b6 # v3 + uses: rancher-eio/read-vault-secrets@7282bf97898cd1c16c89f837e0bb442e6d384c89 # v3 with: secrets: | secret/data/github/org/neuvector/fossa/credentials token | FOSSA_API_KEY_PUSH_ONLY