From fc4fd9062ef5524b581e73bf1c7f0d5a05ffd71b Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 26 Nov 2025 10:23:03 +0000
Subject: [PATCH 1/2] Initial plan


From 733eaf8b66de84c2cd41274f8cbb9d97a8ddad8e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 26 Nov 2025 10:29:45 +0000
Subject: [PATCH 2/2] Use commit SHA versioning for all actions with version
 comments and persist-credentials: false

Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
---
 .github/workflows/Action-Test.yml  | 4 +++-
 .github/workflows/Auto-Release.yml | 6 ++++--
 .github/workflows/Linter.yml       | 5 +++--
 action.yml                         | 2 +-
 4 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/Action-Test.yml b/.github/workflows/Action-Test.yml
index 453d51d..ec754ad 100644
--- a/.github/workflows/Action-Test.yml
+++ b/.github/workflows/Action-Test.yml
@@ -23,7 +23,9 @@ jobs:
     steps:
       # Need to check out as part of the test, as its a local action
       - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+        with:
+          persist-credentials: false
 
       - name: Action-Test
         uses: ./
diff --git a/.github/workflows/Auto-Release.yml b/.github/workflows/Auto-Release.yml
index b083552..dc624c9 100644
--- a/.github/workflows/Auto-Release.yml
+++ b/.github/workflows/Auto-Release.yml
@@ -26,7 +26,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+        with:
+          persist-credentials: false
 
       - name: Auto-Release
-        uses: PSModule/Auto-Release@v1
+        uses: PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1
diff --git a/.github/workflows/Linter.yml b/.github/workflows/Linter.yml
index 1962629..1719852 100644
--- a/.github/workflows/Linter.yml
+++ b/.github/workflows/Linter.yml
@@ -19,12 +19,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Lint code base
-        uses: super-linter/super-linter@latest
+        uses: super-linter/super-linter@2bdd90ed3262e023ac84bf8fe35dc480721fc1f2 # v8
         env:
           GITHUB_TOKEN: ${{ github.token }}
           VALIDATE_JSON_PRETTIER: false
diff --git a/action.yml b/action.yml
index c79e7f6..7af169d 100644
--- a/action.yml
+++ b/action.yml
@@ -34,7 +34,7 @@ runs:
   using: composite
   steps:
     - name: Template-Action
-      uses: PSModule/GitHub-Script@v1
+      uses: PSModule/GitHub-Script@4f9c58a26940a15fb039e4065c63cc11467ab224 # v1
       env:
         PSMOUDLE_TEMPLATE_ACTION_INPUT_Subject: ${{ inputs.Subject }}
       with: