From 0e50194de868de89ba9545e296fc254c13aaf4cc Mon Sep 17 00:00:00 2001
From: laurentsimon <laurentsimon@google.com>
Date: Fri, 10 Dec 2021 17:56:35 +0000
Subject: [PATCH] use hash

---
 code-scanning/scorecards.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/code-scanning/scorecards.yml b/code-scanning/scorecards.yml
index 23dc0c1..709da7e 100644
--- a/code-scanning/scorecards.yml
+++ b/code-scanning/scorecards.yml
@@ -24,8 +24,7 @@ jobs:
         uses: actions/checkout@v1
 
       - name: "Run analysis"
-        # TODO: update with a hash once we have a release.
-        uses: ossf/scorecard-action@feat/rempol
+        uses: ossf/scorecard-action@59f9117686133e93b60a8f23131f87089a076e1b
         with:
           results_file: results.sarif
           results_format: sarif