From 51b17add3e67a6e04e502800d44ed5212ad1bc3c Mon Sep 17 00:00:00 2001
From: "dreadnode-renovate-bot[bot]"
 <184170622+dreadnode-renovate-bot[bot]@users.noreply.github.com>
Date: Sun, 25 Oct 2026 00:16:11 +0000
Subject: [PATCH] chore(deps): update returntocorp/semgrep docker digest to
 3db5c7a

---
 .github/workflows/semgrep.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/semgrep.yaml b/.github/workflows/semgrep.yaml
index 28f56550..6ebaa26b 100644
--- a/.github/workflows/semgrep.yaml
+++ b/.github/workflows/semgrep.yaml
@@ -32,7 +32,7 @@ jobs:
     name: 🚨 Semgrep Analysis
     runs-on: ubuntu-latest
     container:
-      image: returntocorp/semgrep@sha256:93963d9295a366f59e4850127b1550400ee7b388f04fe144e4a1f6325d96e01b
+      image: returntocorp/semgrep@sha256:3db5c7af55eb1f512eac0abf0ab69a97b52c74b5e9a27314c221aee1a78d7ab2
 
     # Skip any PR created by dependabot to avoid permission issues:
     if: (github.actor != 'dependabot[bot]')