BRADSEC 3e46e676d3 Pin publish action to working v1 commit (supply-chain hardening) ...

Pin Comfy-Org/publish-node-action to commit 0eb6cd742945443bee7f79eeddd4f732780029a1 (the v1 head) so a moved
tag cannot inject code. NOTE: the 1.0.1 release tag is broken (runs the
removed 'comfy --yes' flag); this commit uses 'comfy --skip-prompt' and works.

2026-06-27 20:41:48 +10:00

..

publish.yml

Pin publish action to working v1 commit (supply-chain hardening)

2026-06-27 20:41:48 +10:00