From a8dfc3774597d180bad4ecef51a76b2c65f4d7d6 Mon Sep 17 00:00:00 2001
From: "stepsecurity-app[bot]"
 <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Date: Wed, 17 Dec 2025 05:22:53 +0000
Subject: [PATCH] [StepSecurity] Apply security best practices

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
---
 .github/actions/cache-npm/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/actions/cache-npm/action.yml b/.github/actions/cache-npm/action.yml
index b99eeb0..602664b 100644
--- a/.github/actions/cache-npm/action.yml
+++ b/.github/actions/cache-npm/action.yml
@@ -16,7 +16,7 @@ runs:
       shell: pwsh
 
     - name: Cache NPM modules
-      uses: actions/cache@v3
+      uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0
       with:
         path: ${{ env.NPM_CACHE_DIRECTORY }}
         key: npm-${{ runner.os }}-${{ runner.arch }}-${{ env.NODEJS_VERSION }}-${{ hashFiles('package-lock.json') }}