From a9e6ac284e78e790625bd4af93e35c72c2a123f5 Mon Sep 17 00:00:00 2001
From: CloudQuery Bot <github@cloudquery.io>
Date: Wed, 25 Mar 2026 10:43:11 +0000
Subject: [PATCH] fix(deps): Pin dependencies

---
 .github/workflows/example.yml        | 2 +-
 .github/workflows/example_matrix.yml | 2 +-
 .github/workflows/prepare.yml        | 6 +++---
 .github/workflows/release-please.yml | 2 +-
 .github/workflows/test.yml           | 4 ++--
 README.md                            | 6 +++---
 6 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/example.yml b/.github/workflows/example.yml
index dd60e651..2d2e10a8 100644
--- a/.github/workflows/example.yml
+++ b/.github/workflows/example.yml
@@ -39,7 +39,7 @@ jobs:
           --health-retries 5
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6
         with:
diff --git a/.github/workflows/example_matrix.yml b/.github/workflows/example_matrix.yml
index 309dfff5..52e43baa 100644
--- a/.github/workflows/example_matrix.yml
+++ b/.github/workflows/example_matrix.yml
@@ -32,7 +32,7 @@ jobs:
           --health-timeout 5s
           --health-retries 5
     steps:
-      - uses: actions/checkout@v6 # Checkout the code so we have access to the config file
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 # Checkout the code so we have access to the config file
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6
         with:
diff --git a/.github/workflows/prepare.yml b/.github/workflows/prepare.yml
index 672cd4ee..b31e0d53 100644
--- a/.github/workflows/prepare.yml
+++ b/.github/workflows/prepare.yml
@@ -10,15 +10,15 @@ jobs:
   prepare-dist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           token: ${{ secrets.GH_CQ_BOT }}
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         with:
           node-version: "lts/*"
           cache: "npm"
       - name: Install dependencies
         run: npm ci
-      - uses: stefanzweifel/git-auto-commit-action@v7
+      - uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7
         with:
           commit_message: "chore: Prepare dist"
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 1bb50830..dd400ed3 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -11,6 +11,6 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: GoogleCloudPlatform/release-please-action@v4
+      - uses: GoogleCloudPlatform/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
         with:
           token: ${{ secrets.GH_CQ_BOT }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8fb4a7b0..22cbea9b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,9 +14,9 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Use Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         with:
           node-version: "lts/*"
           cache: "npm"
diff --git a/README.md b/README.md
index 40fdd12b..6321d8b3 100644
--- a/README.md
+++ b/README.md
@@ -25,16 +25,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checkout a git repository with a pre-existing CloudQuery configuration files
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       # Setup AWS credentials (example)
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
         with:
           role-to-assume: <role-arn>
           aws-region: <region>
 
-      - uses: cloudquery/setup-cloudquery@v5.0.0 # x-release-please-version
+      - uses: cloudquery/setup-cloudquery@ac7302f8eab40c6d17c16535fbc302d8bdc12d7f # v5.0.0 # x-release-please-version
         name: Setup CloudQuery
         with:
           # Required. Must be a valid SemVer version