From 4398d12989f3188390a457c8f699fbc2a1f8adc0 Mon Sep 17 00:00:00 2001
From: shreyah963 <shreyab963@gmail.com>
Date: Thu, 21 May 2026 13:00:17 -0700
Subject: [PATCH] Pin actions/github-script to exact commit SHA

Signed-off-by: shreyah963 <shreyab963@gmail.com>
---
 .github/workflows/add-untriaged.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/add-untriaged.yml b/.github/workflows/add-untriaged.yml
index 226599223..f68498a52 100644
--- a/.github/workflows/add-untriaged.yml
+++ b/.github/workflows/add-untriaged.yml
@@ -10,7 +10,7 @@ jobs:
     permissions:
       issues: write
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             github.rest.issues.addLabels({