ci: pin the Semgrep version without hashes

Keep a single "semgrep==" line so Dependabot bumps Semgrep itself, but
let pip resolve its transitive dependencies instead of locking them by
hash.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>
This commit is contained in:
Niels Lohmann committed 2026-11-11 10:51:15 +01:00
1 parent 66452227ac
commit b23797aeac
2 files changed
+6 -5

No files matched your search

@@ -0,0 +1 @@
semgrep==1.184.0