From a4c5e79ae1ddbcc63fcb1f0cdd628baa91db4eea Mon Sep 17 00:00:00 2001
From: Harshit Sharma <66710144+harshitethic@users.noreply.github.com>
Date: Sat, 24 Oct 2026 01:24:56 -0400
Subject: [PATCH] ci(clonepeek): upgrade pinned v0.5.1 action and expected
 scanner version

---
 .github/workflows/clonepeek-consumer.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/clonepeek-consumer.yml b/.github/workflows/clonepeek-consumer.yml
index 5057fe5..b78e7ae 100644
--- a/.github/workflows/clonepeek-consumer.yml
+++ b/.github/workflows/clonepeek-consumer.yml
@@ -24,7 +24,7 @@ jobs:
 
       - name: Audit RepoPilot as an actual independent consumer
         id: repopilot
-        uses: harshitethic/clonepeek@65adee2b786e0c686b010f4f8f30b4e692759a95
+        uses: harshitethic/clonepeek@01161b9521c457406542dcac88c79d5028b0908c
         with:
           path: .
           fail-on: none
@@ -55,7 +55,7 @@ jobs:
 
       - name: Scan external Cursor configuration as a separate consumer
         id: cursor
-        uses: harshitethic/clonepeek@65adee2b786e0c686b010f4f8f30b4e692759a95
+        uses: harshitethic/clonepeek@01161b9521c457406542dcac88c79d5028b0908c
         with:
           path: public-samples/cursor-cookbook
           fail-on: none
@@ -64,7 +64,7 @@ jobs:
 
       - name: Scan external VS Code configuration as a separate consumer
         id: yappchat
-        uses: harshitethic/clonepeek@65adee2b786e0c686b010f4f8f30b4e692759a95
+        uses: harshitethic/clonepeek@01161b9521c457406542dcac88c79d5028b0908c
         with:
           path: public-samples/yappchat
           fail-on: none
@@ -93,7 +93,7 @@ jobs:
           def load_report(env_key):
               report = json.loads(Path(os.environ[env_key]).read_text(encoding="utf-8"))
               assert report["tool"] == "clonepeek"
-              assert report["version"] == "0.5.0"
+              assert report["version"] == "0.5.1"  # This workflow pins ClonePeek v0.5.1 by commit SHA
               return report
 
           def git_blob_sha(data):