Commit 5b64ad0
fix(security): pin mkdocs-material version in pages workflow (#106)
## Summary
Pins `mkdocs-material` to version 9.7.4 in the GitHub Pages deployment
workflow to address Scorecard alert #27 (unpinned pip dependency).
### Changes
- **pages.yml**: `pip install mkdocs-material` → `pip install
mkdocs-material==9.7.4`
### Context
Unpinned pip dependencies allow supply chain attacks where a compromised
package version could be installed during CI. Pinning to a specific
version ensures reproducible builds.
Closes #99
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>1 parent fd2d3d7 commit 5b64ad0
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
30 | | - | |
| 30 | + | |
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
| |||
0 commit comments