From 6bf597d419459c99f24ffeae8065feae2f860778 Mon Sep 17 00:00:00 2001
From: "{\"message\":\"Resource not accessible by
 integration\",\"documentation_url\":\"https://docs.github.com/rest/users/users#get-the-authenticated-user\",\"status\":\"403\"}github-actions[bot]"
 <{"message":"Resource not accessible by integration","documentation_url":"https://docs.github.com/rest/users/users#get-the-authenticated-user","status":"403"}41898282+{"message":"Resource not accessible by integration","documentation_url":"https://docs.github.com/rest/users/users#get-the-authenticated-user","status":"403"}github-actions[bot]@users.noreply.github.com>
Date: Sun, 27 Sep 2026 18:01:07 +0000
Subject: [PATCH] ci: pin GitHub Actions to commit SHAs

---
 .github/workflows/run_e2e.yaml   | 4 ++--
 .github/workflows/run_tests.yaml | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/run_e2e.yaml b/.github/workflows/run_e2e.yaml
index 5dcb195d2..370a02fbc 100644
--- a/.github/workflows/run_e2e.yaml
+++ b/.github/workflows/run_e2e.yaml
@@ -11,8 +11,8 @@ jobs:
     name: End-2-End tests
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v1
-    - uses: actions/setup-go@v2
+    - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1.2.0
+    - uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2.2.0
       with:
           go-version: "^1.17.4"
     - name: Make dependencies
diff --git a/.github/workflows/run_tests.yaml b/.github/workflows/run_tests.yaml
index 13810d9d2..64969413f 100644
--- a/.github/workflows/run_tests.yaml
+++ b/.github/workflows/run_tests.yaml
@@ -11,8 +11,8 @@ jobs:
     name: Unit tests and coverage
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
-    - uses: actions/setup-go@v2
+    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+    - uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2.2.0
       with:
           go-version: "^1.17.4"
     - name: Make dependencies
@@ -22,7 +22,7 @@ jobs:
     - name: Run unit tests
       run: go test -race -covermode atomic -coverprofile=coverage.out ./...
     - name: Convert coverage to lcov
-      uses: jandelgado/gcov2lcov-action@v1.0.8
+      uses: jandelgado/gcov2lcov-action@2477d9ec11814a9326e7fdde8d315783d163edb7 # v1.0.8
     - name: Coveralls
       uses: coverallsapp/github-action@master
       with: