From 8affe2bec47b141cceb1063a7b989917cc9dad36 Mon Sep 17 00:00:00 2001
From: "netic-renovate[bot]"
 <207156494+netic-renovate[bot]@users.noreply.github.com>
Date: Thu, 15 May 2025 09:15:42 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/go-cd.yaml |  6 +++---
 .github/workflows/go-ci.yaml | 14 +++++++-------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/go-cd.yaml b/.github/workflows/go-cd.yaml
index 423a793..d4281c5 100644
--- a/.github/workflows/go-cd.yaml
+++ b/.github/workflows/go-cd.yaml
@@ -39,12 +39,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
           # go-version takes precedence over go-version-file
           # if it is empty, go-version-file will be used
@@ -56,7 +56,7 @@ jobs:
         run: git config --global url."https://${{ env.GH_USERNAME }}:${{ env.GH_TOKEN }}@github.com".insteadOf "https://github.com"
 
       - name: Run GoReleaser Release
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6
         with:
           distribution: goreleaser
           version: "~> v2"
diff --git a/.github/workflows/go-ci.yaml b/.github/workflows/go-ci.yaml
index 6780340..4901855 100644
--- a/.github/workflows/go-ci.yaml
+++ b/.github/workflows/go-ci.yaml
@@ -45,10 +45,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
           # go-version takes precedence over go-version-file
           # if it is empty, go-version-file will be used
@@ -66,7 +66,7 @@ jobs:
           go mod verify
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v8
+        uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8
         with:
           version: v2.1
 
@@ -79,7 +79,7 @@ jobs:
 
       - name: Install GoReleaser
         if: inputs.run-release-test
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6
         with:
           distribution: goreleaser
           version: "~> v2"
@@ -97,10 +97,10 @@ jobs:
       GH_TOKEN: ${{ secrets.gh_token || secrets.GH_NETIC_ROBOT_CLASSIC_TOKEN }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@0.30.0
+        uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
         with:
           scan-type: "fs"
           format: "table"
@@ -109,7 +109,7 @@ jobs:
           vuln-type: "library"
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
           # go-version takes precedence over go-version-file
           # if it is empty, go-version-file will be used