From 8cc1862cb7f57149501f00fda31404b9b0519237 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Jan 2026 14:49:43 +0000
Subject: [PATCH 1/3] Initial plan


From defc8dd2d96b2ac6ec894e2490e6f7a7988581c6 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Jan 2026 15:04:55 +0000
Subject: [PATCH 2/3] Update action pin SHAs for anchore/sbom-action and
 actions/ai-inference

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
---
 .github/aw/actions-lock.json       | 4 ++--
 pkg/workflow/data/action_pins.json | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
index 9326fe7c8f..a6bd5ce3a4 100644
--- a/.github/aw/actions-lock.json
+++ b/.github/aw/actions-lock.json
@@ -3,7 +3,7 @@
     "actions/ai-inference@v2": {
       "repo": "actions/ai-inference",
       "version": "v2",
-      "sha": "334892bb203895caaed82ec52d23c1ed9385151e"
+      "sha": "a6101c89c6feaecc585efdd8d461f18bb7896f20"
     },
     "actions/attest-build-provenance@v2": {
       "repo": "actions/attest-build-provenance",
@@ -113,7 +113,7 @@
     "anchore/sbom-action@v0": {
       "repo": "anchore/sbom-action",
       "version": "v0",
-      "sha": "0b82b0b1a22399a1c542d4d656f70cd903571b5c"
+      "sha": "62ad5284b8ced813296287a0b63906cb364b73ee"
     },
     "anchore/sbom-action@v0.20.10": {
       "repo": "anchore/sbom-action",
diff --git a/pkg/workflow/data/action_pins.json b/pkg/workflow/data/action_pins.json
index 9326fe7c8f..a6bd5ce3a4 100644
--- a/pkg/workflow/data/action_pins.json
+++ b/pkg/workflow/data/action_pins.json
@@ -3,7 +3,7 @@
     "actions/ai-inference@v2": {
       "repo": "actions/ai-inference",
       "version": "v2",
-      "sha": "334892bb203895caaed82ec52d23c1ed9385151e"
+      "sha": "a6101c89c6feaecc585efdd8d461f18bb7896f20"
     },
     "actions/attest-build-provenance@v2": {
       "repo": "actions/attest-build-provenance",
@@ -113,7 +113,7 @@
     "anchore/sbom-action@v0": {
       "repo": "anchore/sbom-action",
       "version": "v0",
-      "sha": "0b82b0b1a22399a1c542d4d656f70cd903571b5c"
+      "sha": "62ad5284b8ced813296287a0b63906cb364b73ee"
     },
     "anchore/sbom-action@v0.20.10": {
       "repo": "anchore/sbom-action",

From 030dda500473143da8a072d8c2ef969b73defa88 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Jan 2026 15:07:03 +0000
Subject: [PATCH 3/3] CI cleanup complete - formatted, linted, tested, and
 recompiled

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
---
 .github/workflows/issue-classifier.lock.yml | 4 ++--
 .github/workflows/release.lock.yml          | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/issue-classifier.lock.yml b/.github/workflows/issue-classifier.lock.yml
index be5da9f1c1..0a39a479e9 100644
--- a/.github/workflows/issue-classifier.lock.yml
+++ b/.github/workflows/issue-classifier.lock.yml
@@ -625,7 +625,7 @@ jobs:
           GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
         run: bash /opt/gh-aw/actions/print_prompt_summary.sh
       - name: Run AI Inference
-        uses: actions/ai-inference@334892bb203895caaed82ec52d23c1ed9385151e # v2
+        uses: actions/ai-inference@a6101c89c6feaecc585efdd8d461f18bb7896f20 # v2
         env:
           GH_AW_MCP_CONFIG: /tmp/gh-aw/mcp-config/mcp-servers.json
           GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
@@ -930,7 +930,7 @@ jobs:
           mkdir -p /tmp/gh-aw/threat-detection
           touch /tmp/gh-aw/threat-detection/detection.log
       - name: Run AI Inference
-        uses: actions/ai-inference@334892bb203895caaed82ec52d23c1ed9385151e # v2
+        uses: actions/ai-inference@a6101c89c6feaecc585efdd8d461f18bb7896f20 # v2
         env:
           GH_AW_MCP_CONFIG: /tmp/gh-aw/mcp-config/mcp-servers.json
           GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml
index 586f56de49..76922d0fde 100644
--- a/.github/workflows/release.lock.yml
+++ b/.github/workflows/release.lock.yml
@@ -1347,13 +1347,13 @@ jobs:
       - name: Download Go modules
         run: go mod download
       - name: Generate SBOM (SPDX format)
-        uses: anchore/sbom-action@0b82b0b1a22399a1c542d4d656f70cd903571b5c # v0
+        uses: anchore/sbom-action@62ad5284b8ced813296287a0b63906cb364b73ee # v0
         with:
           artifact-name: sbom.spdx.json
           format: spdx-json
           output-file: sbom.spdx.json
       - name: Generate SBOM (CycloneDX format)
-        uses: anchore/sbom-action@0b82b0b1a22399a1c542d4d656f70cd903571b5c # v0
+        uses: anchore/sbom-action@62ad5284b8ced813296287a0b63906cb364b73ee # v0
         with:
           artifact-name: sbom.cdx.json
           format: cyclonedx-json