From f0844bec5f693b44a111ca837bf4b56f9a757c56 Mon Sep 17 00:00:00 2001
From: May <110405507+mushroomempires@users.noreply.github.com>
Date: Thu, 17 Apr 2025 12:06:08 +0200
Subject: [PATCH] enh(ci): implement hash check for actions in actionlint
 (#5550)

---
 .github/workflows/actionlint.yml          | 3 +++
 .github/workflows/perl-cpan-libraries.yml | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 7fffe1fab..eadcf05fc 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -37,6 +37,9 @@ jobs:
           -color
         shell: bash
 
+      - name: Ensure SHA pinned actions
+        uses: centreon/github-actions-ensure-sha-pinned-actions@47d553c67ceb08ad660deaeb3b994e47a3dd8fc3 # v3.0.23.3
+
   yaml-lint:
     runs-on: ubuntu-24.04
     steps:
diff --git a/.github/workflows/perl-cpan-libraries.yml b/.github/workflows/perl-cpan-libraries.yml
index 37de44ab7..8a879de34 100644
--- a/.github/workflows/perl-cpan-libraries.yml
+++ b/.github/workflows/perl-cpan-libraries.yml
@@ -718,7 +718,7 @@ jobs:
 
       - name: Upload error log
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
         with:
           name: install_error_log_${{ matrix.distrib }}-${{ matrix.arch }}
           path: install_error_${{ matrix.distrib }}_${{ matrix.arch }}.log