From 6e5c3a22f1c14d5d4b1cec63f9845c84dd2d1c1d Mon Sep 17 00:00:00 2001
From: awalsh128 <awalsh128@gmail.com>
Date: Thu, 5 Nov 2026 19:30:08 -0800
Subject: [PATCH] ci: authenticate the action pin check to avoid API rate
 limits

The check called the GitHub API anonymously and hit the rate limit for
the shared runner IP. The script uses GITHUB_TOKEN when it's set.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6e419b3..a48fb86 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -119,6 +119,9 @@ jobs:
 
       - name: Check Action Dependencies Pinned
         shell: bash
+        env:
+          # Authenticated API requests avoid the shared runner IP rate limit.
+          GITHUB_TOKEN: ${{ github.token }}
         run: npm run check:latest-action-pins
 
   testing: