ci: pin the Semgrep version without hashes
Keep a single "semgrep==" line so Dependabot bumps Semgrep itself, but let pip resolve its transitive dependencies instead of locking them by hash. Signed-off-by: Niels Lohmann <mail@nlohmann.me>
This commit is contained in:
2 files changed
+6
-5
No files matched your search
@@ -0,0 +1 @@
|
||||
semgrep==1.184.0
|
||||
Reference in new issue
Block a user