Update pop.yml

Signed-off-by: François Proulx <[email protected]>

.github/workflows/pop.yml

@@ -31,10 +31,9 @@ jobs:
           codeload.github.com:443
           objects.githubusercontent.com:443
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: ./
+    - uses: boostsecurityio/poutine-action@63ba14852cb46e541bfca609eedda08df9197b76 # v0.9.7
       name: "Run poutine on poutine's own codebase"
       id: self-test
-
     - name: Upload SARIF file
       uses: github/codeql-action/upload-sarif@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
       with: