version pinned

Author: thanhnguyen-mdb

.github/workflows/sbom.yml

@@ -64,7 +64,7 @@ jobs:
           path: sbom.json
           if-no-files-found: error
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@b4733b9419fd47bbfa1807b15627e17cd70b5b22 # v7.0.9
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: 'Update SBOM after dependency changes'