From f24b8a5cf1ccbf87cbea1b1fb1eefc9ec45d86e7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A9d=C3=A9ric=20Hurier=20=28Fmind=29?=
 <github@fmind.dev>
Date: Mon, 10 Aug 2026 19:05:33 +0200
Subject: [PATCH] fix(ci): pin the security workflow runner to ubuntu-24.04

Every other job in these repositories pins its runner image; the scheduled scan
was still on ubuntu-latest. A scanner whose runner moves underneath it turns a
new finding into a question about the image rather than about the code.
---
 .github/workflows/security.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 9f8ce23..bc18cc2 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -14,7 +14,7 @@ concurrency:
 jobs:
   scan:
     name: Full-history scan
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - name: Checkout complete history