From b951ed27f5a643d16b2bf2db818cde26c7b7f0ff Mon Sep 17 00:00:00 2001
From: Mathieu Tarral <mathieu.tarral@protonmail.com>
Date: Mon, 2 Feb 2026 15:00:45 +0100
Subject: [PATCH] ci: lock cargo install in SDL scan job

---
 .github/workflows/scans.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scans.yml b/.github/workflows/scans.yml
index 4e06ff9f..f955c964 100644
--- a/.github/workflows/scans.yml
+++ b/.github/workflows/scans.yml
@@ -239,7 +239,7 @@ jobs:
 
       - name: Install Cargo Plugins
         run: |
-          cargo install cargo-audit cargo-outdated
+          cargo install --locked cargo-audit cargo-outdated
 
       - name: (CT247/CT200) (N/C) - Scan 3rd-Party Components for Vulnerabilities
         run: |