From 4dbc8f5366bef3bef1f4a93a8707f8676dc2b5cd Mon Sep 17 00:00:00 2001
From: Alan Agius <17563226+alan-agius4@users.noreply.github.com>
Date: Thu, 28 Aug 2025 15:41:00 +0000
Subject: [PATCH] ci: pin `@google-github-actions/auth`

Fixes the following CI error:
```
The action google-github-actions/auth@v2 is not allowed in angular/dev-infra because all actions must be pinned to a full-length commit SHA.
```
---
 .github/workflows/perf.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml
index 0682f3fad..b75c5ba8e 100644
--- a/.github/workflows/perf.yml
+++ b/.github/workflows/perf.yml
@@ -49,7 +49,7 @@ jobs:
       # identity federation. This allows us to request short lived credentials on demand, rather than storing
       # credentials in secrets long term. More information can be found at:
       # https://docs.github.com/en/actions/security-for-github-actions/security-hardening-your-deployments/configuring-openid-connect-in-google-cloud-platform
-      - uses: 'google-github-actions/auth@v2'
+      - uses: 'google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5' #v2.1.12
         with:
           project_id: 'internal-200822'
           workload_identity_provider: 'projects/823469418460/locations/global/workloadIdentityPools/measurables-tracking/providers/angular'