mirror of
https://github.com/penpot/penpot.git
synced 2026-07-21 13:37:49 +00:00
The notify steps referenced mattermost/action-mattermost-notify@master, a mutable branch that runs in CI with access to the MATTERMOST_WEBHOOK_URL secret. Pinning to the immutable commit of the latest release (v2.1.0, ae31bb6) keeps the exact reviewed code from executing, per GitHub third-party action hardening guidance, while staying easy to bump.