PIN SHA Commits

[Sushmitha-MN]

No description provided.

[Copilot]

Pull request overview

This PR updates GitHub Actions workflow files to use pinned SHA commits instead of version tags for security and reproducibility purposes. This is a common security best practice that ensures workflows use specific, verified versions of actions.

Changes:

• Replaced actions/checkout@v4 with SHA commit actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 across all workflow files
• Replaced actions/setup-python@v6 with SHA commit actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
• Replaced github/codeql-action/*@v4 with SHA commit github/codeql-action/*@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
• Replaced contributor-assistant/github-action@v2.6.1 with SHA commit contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08

Reviewed changes

Copilot reviewed 24 out of 24 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/unittest_nanocrypto_extended.yml	Updated checkout action to use pinned SHA
.github/workflows/unittest_cryptointerface_extended.yml	Updated checkout actions (2 instances) to use pinned SHA
.github/workflows/unittest_asn1_extended.yml	Updated checkout actions (2 instances) to use pinned SHA
.github/workflows/unittest_asn1.yml	Updated checkout action to use pinned SHA
.github/workflows/smp_nanoroot_unittest.yml	Updated checkout actions (2 instances) to use pinned SHA
.github/workflows/scep_unittest.yml	Updated checkout action to use pinned SHA
.github/workflows/pre-commit.yml	Updated checkout and setup-python actions to use pinned SHAs
.github/workflows/pkcs11_softhsm2_build.yml	Updated checkout action to use pinned SHA
.github/workflows/nanossl_integration_test.yml	Updated checkout action to use pinned SHA
.github/workflows/nanossh_unit_test.yml	Updated checkout action to use pinned SHA
.github/workflows/nanossh_sanity_test.yml	Updated checkout action to use pinned SHA
.github/workflows/nanossh_integration_test.yml	Updated checkout action to use pinned SHA
.github/workflows/nanomqtt_unit_test.yml	Updated checkout action to use pinned SHA
.github/workflows/nanomqtt_integration_test.yml	Updated checkout action to use pinned SHA
.github/workflows/nanomqtt_functional_test.yml	Updated checkout action to use pinned SHA
.github/workflows/nanocert_scep_integration_test.yml	Updated checkout action to use pinned SHA
.github/workflows/est_unittest.yml	Updated checkout action to use pinned SHA
.github/workflows/crypto_unittest.yml	Updated checkout action to use pinned SHA
.github/workflows/crypto_interop_test.yml	Updated checkout action to use pinned SHA
.github/workflows/crypto_interface_unittest.yml	Updated checkout action to use pinned SHA
.github/workflows/common_unittest.yml	Updated checkout action to use pinned SHA
.github/workflows/codeql.yml	Updated checkout and codeql-action actions (3 instances) to use pinned SHAs
.github/workflows/cla.yml	Updated contributor-assistant action to use pinned SHA
.github/workflows/asn1_unittest.yml	Updated checkout action to use pinned SHA

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.