From f176740a03cb62042ef5ba1e2dec3dc09dad07d4 Mon Sep 17 00:00:00 2001
From: mirkosalvato1-ctrl
 <227404546+mirkosalvato1-ctrl@users.noreply.github.com>
Date: Thu, 23 Jul 2026 08:55:20 +0200
Subject: [PATCH] ci: pin GitHub Actions to commit SHAs (3 pin(s))

---
 .github/workflows/build-storybook.yml   | 4 ++--
 .github/workflows/dependency-review.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-storybook.yml b/.github/workflows/build-storybook.yml
index 9bf5308ad71..494c4cea0da 100644
--- a/.github/workflows/build-storybook.yml
+++ b/.github/workflows/build-storybook.yml
@@ -37,7 +37,7 @@ jobs:
 
       - name: Upload to GitHub Pages
         id: deployment
-        uses: actions/upload-pages-artifact@v5
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9  # v5
         with:
           path: extensions/ql-vscode/storybook-static
 
@@ -54,4 +54,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v5
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128  # v5
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 84ca15d6419..7dde72b16e6 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -13,4 +13,4 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@v7
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@v5
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294  # v5