From 60ac08d11fa8c970aaa40a06b8e13cd349d3e115 Mon Sep 17 00:00:00 2001
From: Jean Bisutti <jean.bisutti@gmail.com>
Date: Thu, 26 Mar 2026 15:43:51 +0100
Subject: [PATCH] Pin GitHub Actions to SHAs

---
 .github/workflows/CI.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 7ece048..e588d23 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -16,14 +16,14 @@ jobs:
       REPO_SLUG: ${{ github.repository }}
       BRANCH: ${{ github.head_ref }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
       with:
         java-version: ${{ matrix.java }}
         distribution: 'temurin'
     - name: Cache Maven dependencies
-      uses: actions/cache@v5
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
       with:
         path: ~/.m2
         key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -33,4 +33,4 @@ jobs:
     - name: check license header is present in all files
       run: mvn license:check
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v5
\ No newline at end of file
+      uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5
\ No newline at end of file