security: pin dependencies and restrict token permissions#90

djach7 wants to merge 1 commit intocontainers:maincontainers/tar-diff:mainfrom

djach7:openssf-evaluationdjach7/tar-diff:openssf-evaluationCopy head branch name to clipboard