From b58ade8125736682d7bd9ce2c1ad996a264b9fba Mon Sep 17 00:00:00 2001
From: Jan-Petter Gundersen <europe.jpg@gmail.com>
Date: Wed, 1 Apr 2026 16:08:06 +0200
Subject: [PATCH 1/2] Pin actions/checkout to commit SHA in unit-tests.yaml

---
 .github/workflows/unit-tests.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml
index 0c19689..4e49e0a 100644
--- a/.github/workflows/unit-tests.yaml
+++ b/.github/workflows/unit-tests.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Set up Python 
         uses: actions/setup-python@v6
         with:

From 5a4c96cc11b58af2391e7770a1c4ec0d92b6f02b Mon Sep 17 00:00:00 2001
From: Jan-Petter Gundersen <europe.jpg@gmail.com>
Date: Wed, 1 Apr 2026 16:10:42 +0200
Subject: [PATCH 2/2] Pin integrations-test.yml actions to commit SHA

---
 .github/workflows/integrations-tests.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/integrations-tests.yml b/.github/workflows/integrations-tests.yml
index 7d481b7..e558703 100644
--- a/.github/workflows/integrations-tests.yml
+++ b/.github/workflows/integrations-tests.yml
@@ -16,7 +16,7 @@ jobs:
     continue-on-error: true
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - uses: ./
         name: Prometheus (YAML)
@@ -61,32 +61,32 @@ jobs:
     needs: [test]
     steps:
       - name: Assert Prometheus EoL
-        uses: nick-fields/assert-action@v2
+        uses: nick-fields/assert-action@aa0067e01f0f6545c31755d6ca128c5a3a14f6bf # v2.0.0
         with:
           expected: 'true'
           actual: "${{ needs.test.outputs.prometheus_end_of_life }}"
       - name: Assert Prometheus extracted version
-        uses: nick-fields/assert-action@v2
+        uses: nick-fields/assert-action@aa0067e01f0f6545c31755d6ca128c5a3a14f6bf # v2.0.0
         with:
           expected: 'v2.55.1'
           actual: "${{ needs.test.outputs.prometheus_version }}"
       - name: Assert Grafana EoL
-        uses: nick-fields/assert-action@v2
+        uses: nick-fields/assert-action@aa0067e01f0f6545c31755d6ca128c5a3a14f6bf # v2.0.0
         with:
           expected: 'true'
           actual: "${{ needs.test.outputs.grafana_end_of_life }}"
       - name: Assert Grafana extracted version
-        uses: nick-fields/assert-action@v2
+        uses: nick-fields/assert-action@aa0067e01f0f6545c31755d6ca128c5a3a14f6bf # v2.0.0
         with:
           expected: 'v10.3.12'
           actual: "${{ needs.test.outputs.grafana_version }}"
       - name: Assert Graylog EoL
-        uses: nick-fields/assert-action@v2
+        uses: nick-fields/assert-action@aa0067e01f0f6545c31755d6ca128c5a3a14f6bf # v2.0.0
         with:
           expected: 'true'
           actual: "${{ needs.test.outputs.graylog_end_of_life }}"
       - name: Assert Graylog extracted version
-        uses: nick-fields/assert-action@v2
+        uses: nick-fields/assert-action@aa0067e01f0f6545c31755d6ca128c5a3a14f6bf # v2.0.0
         with:
           expected: 'v5.2.12'
           actual: "${{ needs.test.outputs.graylog_version }}"