Merge pull request #22 from browserstack/LTS-5442-playwright-sample-security

LTS-5442: pin Semgrep image digest and patch brace-expansion

Author: SaranshBS

.github/workflows/Semgrep.yml

@@ -27,7 +27,7 @@ jobs:
 
     container:
       # A Docker image with Semgrep installed. Do not change this.
-      image: returntocorp/semgrep:1.166.0
+      image: returntocorp/semgrep:1.166.0@sha256:c180f0c93a17b420c0af5006214a29d3c747c5459c732b740191adf657dd0068
     # Skip any PR created by dependabot to avoid permission issues:
     if: (github.actor != 'dependabot[bot]')
 

package-lock.json

@@ -20,7 +20,7 @@
     "fast-uri": "^3.1.6",
     "js-yaml@3": "^3.15.2",
     "js-yaml@4": "^4.3.2",
-    "brace-expansion": "2.1.4",
+    "brace-expansion": "2.1.7",
     "socks": "2.8.9",
     "ip-address": "10.4.0",
     "tmp": "0.2.7",