Update amplify.yml

[confusedcrib]

No description provided.

[dryrunsecurity]

DryRun Security Summary

GitHub Actions workflow for Amplify Security Runner was updated by pinning the action to a specific commit hash to improve security, prevent supply chain attacks, and ensure consistent workflow execution.

Expand for full summary

1. Updated GitHub Actions workflow file for Amplify Security Runner, pinning action to a specific commit hash for improved security control.

2. Security Findings:
   • Positive Security Practice: Replaced floating @main reference with specific commit hash @8697d6900ac891b97ad712aaa6d5d64a59daa6ee
   • Mitigation of Supply Chain Attack Risk: Commit hash pinning prevents potential unauthorized action modifications
   • Enhanced Predictability: Ensures consistent and immutable action version during workflow execution

View PR in the DryRun Dashboard.

[zeropath-ai]

✅ No security or compliance issues detected. Reviewed everything up to 73cda95.

Security Overview

• 🔎 Scanned files: 1 changed file(s)

Detected Code Changes

Change Type	Relevant files
Configuration changes	► amplify.yml     Update Amplify runner action version to specific commit hash

Reply to this PR with @zeropath-ai followed by a description of what change you want and we'll auto-submit a change to this PR to implement it.