From 8173f01836e1979b1c22112ffb31409c9938387b Mon Sep 17 00:00:00 2001 From: Aleksander Olszewski Date: Thu, 18 Jun 2026 14:37:18 +0200 Subject: [PATCH] CICD-13444 Pin GitHub Actions to approved SHAs --- .github/workflows/build.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 794603b..4b21067 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -24,7 +24,7 @@ jobs: run: go mod tidy - name: Lint - uses: golangci/golangci-lint-action@v8 + uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8 with: version: v2.4.0 @@ -35,7 +35,7 @@ jobs: run: make test - name: SonarQube Scan - uses: sonarsource/sonarqube-scan-action@v5 + uses: sonarsource/sonarqube-scan-action@2f77a1ec69fb1d595b06f35ab27e97605bdef703 # v5 env: SONAR_TOKEN: ${{ secrets.SONARQUBE_PUBLIC_API_KEY }} SONAR_HOST_URL: https://sonarqube.collibra.dev @@ -52,6 +52,6 @@ jobs: # SONAR_HOST_URL: https://sonarqube.collibra.dev - name: FOSSA Scan - uses: fossas/fossa-action@v1 + uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # v1 with: api-key: ${{ secrets.FOSSA_PUBLIC_API_KEY }}