From 4bd0f7f3118b0d670ec14d34dd19820e2692811e Mon Sep 17 00:00:00 2001
From: Tim Walsh <tim@mims.ms>
Date: Tue, 14 Jul 2026 23:51:59 -0700
Subject: [PATCH] ci: pin securego/gosec action to v2.28.0

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 40fb3b9..c029ecc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -106,7 +106,7 @@ jobs:
         go-version: '1.24'
     
     - name: Run gosec
-      uses: securego/gosec@master
+      uses: securego/gosec@v2.28.0
       with:
         args: -fmt sarif -out gosec-results.sarif ./...