# The Semgrep release the Security workflow runs, pinned by digest, with its
# dependencies inside; Dependabot proposes new releases. Its registry rules
# are fetched on every run and change often, so they are not pinned.
FROM semgrep/semgrep:1.178.0@sha256:32e459968daabe7ab86968184a29109b9564aa00392401156f9788452b42786b
