From 3a996cfad3a2d1c8e3a25751fcae0d07a42f0a73 Mon Sep 17 00:00:00 2001
From: Julien Doutre <36448022+juliendoutre@users.noreply.github.com>
Date: Mon, 16 Mar 2026 14:26:40 +0100
Subject: [PATCH] Pin GitHub Actions

---
 .github/workflows/ci.yml     | 4 ++--
 .github/workflows/linter.yml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index abb7b62..5e119dd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,10 +33,10 @@ jobs:
     runs-on: 'ubuntu-latest'
     name: 'Tests'
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1'
 
       - name: 'Setup Go environment'
-        uses: 'actions/setup-go@v4'
+        uses: 'actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0'
         with:
           go-version: '1.24.x'
 
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index a078dd6..6481c19 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -34,10 +34,10 @@ jobs:
     name: 'Lint Go files'
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1'
 
       - name: 'Setup Go environment'
-        uses: 'actions/setup-go@v4'
+        uses: 'actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0'
         with:
           go-version: '1.24.x'