From 12dcda2072509b5af7b652c26829c9e4ae6b6178 Mon Sep 17 00:00:00 2001
From: OssSecurityBot <oss-security-bot@microsoft.com>
Date: Tue, 4 Aug 2026 09:22:45 -0700
Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs

---
 .github/dependabot.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8487f45d76100..fcd05d11fb091 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,6 +14,8 @@ updates:
       github-actions:
         patterns:
           - '*'
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: 'devcontainers'
     directory: '/'