From 1cb73cbf54a7e3097260c530fea415d947b637cb Mon Sep 17 00:00:00 2001
From: David Salvador <62070820+davidsalvador-tf@users.noreply.github.com>
Date: Tue, 30 Jun 2026 12:07:32 +0200
Subject: [PATCH] security(NOJIRA-1234): replace compromised
 codfish/semantic-release-action with cycjimmy/semantic-release-action

---
 .github/workflows/ci.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 8cc0dde..550415c 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -36,7 +36,7 @@ jobs:
       - name: Semantic Release
         id: semantic
         if: github.event_name == 'push'
-        uses: codfish/semantic-release-action@v1
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
         with:
           branches: |
             ['main']