From a55b82a2c673a82e03d1c5d0aad91f936aee395b Mon Sep 17 00:00:00 2001
From: slawomirbabicz <111378977+slawomirbabicz@users.noreply.github.com>
Date: Thu, 9 Apr 2026 17:41:54 +0200
Subject: [PATCH 1/2] chore: pin actions to SHA in
 .github/workflows/ci-notify-slack.yml

---
 .github/workflows/ci-notify-slack.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci-notify-slack.yml b/.github/workflows/ci-notify-slack.yml
index fd84dbe..d15a875 100644
--- a/.github/workflows/ci-notify-slack.yml
+++ b/.github/workflows/ci-notify-slack.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Sanitize PR title
         id: sanitize

From f37ec8852e77968ec4597250b7b4bec44ce2536f Mon Sep 17 00:00:00 2001
From: slawomirbabicz <111378977+slawomirbabicz@users.noreply.github.com>
Date: Thu, 9 Apr 2026 17:41:56 +0200
Subject: [PATCH 2/2] chore: pin actions to SHA in
 .github/workflows/pocket-ic-server-action-test.yml

---
 .github/workflows/pocket-ic-server-action-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/pocket-ic-server-action-test.yml b/.github/workflows/pocket-ic-server-action-test.yml
index 76b39d6..a4ee436 100644
--- a/.github/workflows/pocket-ic-server-action-test.yml
+++ b/.github/workflows/pocket-ic-server-action-test.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - name: Install latest PocketIC server and check its version
         if: "${{ matrix.version == '' }}"
         uses: ./