From cf04cb8b5a45bbe0500451e203352c5c4f03732f Mon Sep 17 00:00:00 2001
From: khoi <6994441+khoi@users.noreply.github.com>
Date: Fri, 7 Aug 2026 23:33:03 +0100
Subject: [PATCH] security: pin the review action revision

Keep the privileged reusable workflow tied to a reviewed action revision instead of following main.
---
 .github/workflows/supareview-review.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/supareview-review.yml b/.github/workflows/supareview-review.yml
index 6094128..8cf6ac8 100644
--- a/.github/workflows/supareview-review.yml
+++ b/.github/workflows/supareview-review.yml
@@ -40,7 +40,7 @@ jobs:
           node-version: "24"
 
       - name: Run SupaReview
-        uses: supabitapp/supareview/actions/supareview@main
+        uses: supabitapp/supareview/actions/supareview@79badffe75c017e9f66178e720570277c35a2013
         with:
           openai-api-key: ${{ secrets.CODEX_BALANCER_API_KEY }}
           openai-base-url: ${{ inputs.openai-base-url }}