mirror of
https://github.com/ellite/Wallos.git
synced 2026-07-31 10:16:03 -04:00
The release/merge job pins this third-party action to the mutable @master branch while holding Docker Hub, ghcr.io (packages:write GITHUB_TOKEN), and Discord webhook secrets. Pinning to a full commit SHA (v0.4.0) removes the mutable-ref supply-chain exposure, consistent with the other actions in this repo.