From ab0e67abc57b4c4d8cfd4780d633ae8669a16a70 Mon Sep 17 00:00:00 2001
From: OssSecurityBot <oss-security-bot@microsoft.com>
Date: Mon, 3 Aug 2026 15:54:10 -0700
Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs

---
 .github/dependabot.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 31a3b6a1e..aa5ea33a1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -73,3 +73,12 @@ updates:
     day: monday
     interval: weekly
 version: 2
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7