Add commit hash to action

Also remove permissions

Author: melissawm

.github/workflows/triage_board.yml

@@ -6,15 +6,18 @@ on:
     - cron: '0 * * * *'  # Run every hour
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   pr-triage:
     runs-on: ubuntu-latest
     steps:
       - name: Update PR Triage Board
-        uses: yuvipanda/pr-triage-board-bot@main
+        uses: jupyter/pr-triage-board-bot@dae1209c73e70224b2f2955590d0698832a5a076  # main @ Oct 26, 2025
         with:
           organization: 'matplotlib'
           project-number: '11'
           gh-app-id: '3339145'
           gh-app-installation-id: '122963236'
           gh-app-private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          repositories: 'matplotlib'