From f51b3131ffb532a5bad0dc674745236dfae00938 Mon Sep 17 00:00:00 2001
From: Erik Gomez <erikg@uber.com>
Date: Thu, 11 Feb 2021 12:46:30 -0600
Subject: [PATCH] better protect code signing certs

---
 .github/workflows/build_python_3.9.1.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build_python_3.9.1.yml b/.github/workflows/build_python_3.9.1.yml
index 3db863a..03ea7ac 100644
--- a/.github/workflows/build_python_3.9.1.yml
+++ b/.github/workflows/build_python_3.9.1.yml
@@ -27,7 +27,7 @@ jobs:
 
     - name: Install Apple certificates
       if: github.ref == 'refs/heads/main'
-      uses: apple-actions/import-codesign-certs@v1
+      uses: apple-actions/import-codesign-certs@253ddeeac23f2bdad1646faac5c8c2832e800071
       with:
         p12-file-base64: ${{ secrets.CERTIFICATES_P12 }}
         p12-password: ${{ secrets.CERTIFICATES_P12_PASSWORD }}