From 7674962190b9cdabe11875e930d69e8e8678c7a8 Mon Sep 17 00:00:00 2001 From: Marguerite Martinez Date: Mon, 6 Jul 2026 11:40:41 -0400 Subject: [PATCH] Socket Basics SAST: use explicit secrets instead of secrets: inherit --- .github/workflows/socket-basics.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/socket-basics.yml b/.github/workflows/socket-basics.yml index 17d85f9..a19fb45 100644 --- a/.github/workflows/socket-basics.yml +++ b/.github/workflows/socket-basics.yml @@ -11,4 +11,5 @@ jobs: # Plus, the shared action does use pinned dependencies, and so will be updated fairly often. When we do that, we do not # want to have to update the sha in every repo that uses this shared action, before such updates apply. uses: ynab/shared-actions/.github/workflows/socket-basics.yml@main - secrets: inherit + secrets: + SOCKET_SECURITY_API_KEY: ${{ secrets.SOCKET_SECURITY_API_KEY }}