From 084c617f7de759b83fd302c7c0cc821c3093c529 Mon Sep 17 00:00:00 2001
From: Mona Fraise <mona@fraise.farm>
Date: Mon, 26 Jan 2026 14:41:06 -0600
Subject: [PATCH] SECOPS-20799 pin commit SHAs

---
 .github/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1f88945..ec315d1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,6 +10,6 @@ jobs:
       matrix:
         go_version: [1.16, 1.17]
     steps:
-    - uses: actions/checkout@v2
-    - uses: actions/setup-go@v2
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6
+    - uses: actions/setup-go@424fc82d43fa5a37540bae62709ddcc23d9520d4 #v2
     - run: make test
\ No newline at end of file