🩹 [Patch]: Pin GitHub-Script action to specific version

[MariusStorhaug]

The GitHub-Script action dependency is now pinned to a specific commit SHA (v1.7.8) for improved security and reproducibility. This ensures consistent builds and protects against potential supply chain attacks where action tags could be moved to point to malicious code.

Pin GitHub-Script action to specific SHA

Updated the action reference in action.yml from the previous SHA to the latest version:

Before	After
PSModule/GitHub-Script@8b9d2739d6896975c0e5448d2021ae2b94b6766a (v1.7.6)	PSModule/GitHub-Script@2010983167dc7a41bcd84cb88e698ec18eccb7ca (v1.7.8)

Why pin to SHA?

Pinning actions to specific commit SHAs is a security best practice that:

• Prevents tag mutation attacks - Tags can be moved, but SHAs are immutable
• Ensures reproducible builds - The exact same code runs every time
• Provides audit trail - Changes to dependencies are explicit and reviewable

[Copilot]

Pull request overview

This PR updates the PSModule/GitHub-Script action dependency to a newer pinned version for improved security and consistency. The action is pinned using commit SHA to prevent tag mutation attacks and ensure reproducible builds.

Changes:

• Updated GitHub-Script action from v1.7.6 to v1.7.8 with corresponding SHA update

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.