From 1a9a04eea951209bc05846da31e220ea648e7793 Mon Sep 17 00:00:00 2001
From: Julien Doutre <36448022+juliendoutre@users.noreply.github.com>
Date: Mon, 16 Mar 2026 14:31:31 +0100
Subject: [PATCH] Pin GitHub Actions

---
 .github/workflows/code-quality.yaml | 4 ++--
 .github/workflows/testing.yaml      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/code-quality.yaml b/.github/workflows/code-quality.yaml
index f128108e..0366fd43 100644
--- a/.github/workflows/code-quality.yaml
+++ b/.github/workflows/code-quality.yaml
@@ -10,7 +10,7 @@ jobs:
   gofmt:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: gofmt
       run: |
         changes=$(find . -name "*.go" | xargs gofmt -s -l 2>&1)
@@ -18,6 +18,6 @@ jobs:
   vet:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: vet
       run: go vet ./...
diff --git a/.github/workflows/testing.yaml b/.github/workflows/testing.yaml
index f748c4f2..dfba687c 100644
--- a/.github/workflows/testing.yaml
+++ b/.github/workflows/testing.yaml
@@ -10,7 +10,7 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: compose build
         run: docker compose build