From 4d5e3c7ed58a6a40c23b2842df9000e93333299d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lo=C3=AFc=20Houpert?=
 <10154151+lhoupert@users.noreply.github.com>
Date: Thu, 2 Apr 2026 17:16:56 +0100
Subject: [PATCH] ci: pin GitHub Actions to SHA digests

Refs #1323
---
 .github/workflows/issue-formatter.yml     | 4 ++--
 .github/workflows/run_full_test_suite.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/issue-formatter.yml b/.github/workflows/issue-formatter.yml
index 37179b65..d9adf9ce 100644
--- a/.github/workflows/issue-formatter.yml
+++ b/.github/workflows/issue-formatter.yml
@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out code
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: Add text to new blank issue
-      uses: actions/github-script@v6
+      uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
       with:
         github-token: ${{secrets.GITHUB_TOKEN}}
         script: |
diff --git a/.github/workflows/run_full_test_suite.yml b/.github/workflows/run_full_test_suite.yml
index 10c61336..da95c671 100644
--- a/.github/workflows/run_full_test_suite.yml
+++ b/.github/workflows/run_full_test_suite.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Check out merged code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Set up Docker Compose
         run: |