PIN SHA Commits

.github/workflows/asn1_unittest.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 

.github/workflows/cla.yml

@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: "CLA Assistant"
         if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
-        uses: contributor-assistant/github-action@v2.6.1
+        uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # the below token should have repo scope and must be manually added by you in the repository's secret

.github/workflows/codeql.yml

@@ -40,7 +40,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install SoftHSM2 (for PKCS11 build)
       if: matrix.feature == 'ENABLE_PKCS11_SOFTHSM'
@@ -57,7 +57,7 @@ jobs:
         find projects -type d -name build -exec rm -rf {} +
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
       with:
         languages: ${{ matrix.language }}
         queries: security-extended,security-and-quality
@@ -83,6 +83,6 @@ jobs:
         cmake --build build
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
       with:
         category: "/language:${{matrix.language}}/${{matrix.feature}}"

.github/workflows/common_unittest.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 

.github/workflows/crypto_interface_unittest.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 

.github/workflows/crypto_interop_test.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 

.github/workflows/crypto_unittest.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 

.github/workflows/est_unittest.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 

.github/workflows/nanocert_scep_integration_test.yml

@@ -50,7 +50,7 @@ jobs:
         cd ..
 
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Copy SCEP Test Files
       run: |

.github/workflows/nanomqtt_functional_test.yml

@@ -31,7 +31,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |
@@ -96,4 +96,4 @@ jobs:
         echo "================================================"
 
     - name: Show Job Status
-      run: echo "🍏 This job's status is ${{ job.status }}."
+      run: echo "🍏 This job's status is ${{ job.status }}."

.github/workflows/nanomqtt_integration_test.yml

@@ -11,7 +11,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |

.github/workflows/nanomqtt_unit_test.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |
@@ -86,4 +86,4 @@ jobs:
         lcov --list /tmp/mqtt_filtered.info
 
     - name: Show Job Status
-      run: echo "🍏 This job's status is ${{ job.status }}."
+      run: echo "🍏 This job's status is ${{ job.status }}."

.github/workflows/nanossh_integration_test.yml

@@ -11,7 +11,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |

.github/workflows/nanossh_sanity_test.yml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |
@@ -30,4 +30,4 @@ jobs:
 
     - name: Run Sanity Tests
       run: |
-        ./scripts/sanity_tests.sh
+        ./scripts/sanity_tests.sh

.github/workflows/nanossh_unit_test.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
       - name: Install Dependencies
         run: |

.github/workflows/nanossl_integration_test.yml

@@ -84,7 +84,7 @@ jobs:
         cd ..
 
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Copy SSL Test Files
       run: |

.github/workflows/pkcs11_softhsm2_build.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 
@@ -44,4 +44,4 @@ jobs:
             -DENABLE_TAP=ON \
             -DSECURE_PATH="$(pwd)" \
             -B build -S . && \
-          cmake --build build
+          cmake --build build

.github/workflows/pre-commit.yml

@@ -14,12 +14,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
         with:
           python-version: '3.13'
 

.github/workflows/scep_unittest.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: [ubuntu-22.04]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: trustcore-test
 

.github/workflows/smp_nanoroot_unittest.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: mss
 
@@ -331,7 +331,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           path: mss
 

.github/workflows/unittest_asn1.yml

@@ -24,7 +24,7 @@ jobs:
 
     steps:
     - name: Checkout current repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |

.github/workflows/unittest_asn1_extended.yml

@@ -13,7 +13,7 @@ jobs:
 
     steps:
     - name: Checkout current repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |
@@ -28,7 +28,7 @@ jobs:
     # Clone & prepare mocn-qa-m-products
     # ------------------------------------------------------------------
     - name: Checkout mocn-qa-m-products
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
       with:
         repository: digicert/mocn-qa-m-products
         token: ${{ secrets.MY_SECRET_TOKEN }}

.github/workflows/unittest_cryptointerface_extended.yml

@@ -13,7 +13,7 @@ jobs:
 
     steps:
     - name: Checkout current repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |
@@ -28,7 +28,7 @@ jobs:
     # Clone & prepare mocn-qa-m-products
     # ------------------------------------------------------------------
     - name: Checkout mocn-qa-m-products
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
       with:
         repository: digicert/mocn-qa-m-products
         token: ${{ secrets.MY_SECRET_TOKEN }}

.github/workflows/unittest_nanocrypto_extended.yml

@@ -13,7 +13,7 @@ jobs:
 
     steps:
     - name: Checkout current repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
     - name: Install Dependencies
       run: |