[StepSecurity] Apply security best practices (#28)

Signed-off-by: StepSecurity Bot <[email protected]>
lurkydismal · Aug 16, 2023 · 1972fb8 · 1972fb8
1 parent af3795f
commit 1972fb8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -9,3 +9,8 @@ updates:
     directory: "/" # Location of package manifests
     schedule:
       interval: "weekly"
+
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: daily
diff --git a/.github/workflows/c-cpp.yml b/.github/workflows/c-cpp.yml
@@ -29,7 +29,7 @@ jobs:
       uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
 
     - name: Setup Python with Meson
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0
       with:
         python-version: '>=3.10.12'
         check-latest: true