From ee1649566a398a760f889d3d1bf434c8d07fe1f7 Mon Sep 17 00:00:00 2001
From: GaltRanch <bruno@nexocore.uy>
Date: Sun, 24 May 2026 12:02:00 -0300
Subject: [PATCH] ci: pin third-party Actions to commit SHAs (CWE-829)

Signed-off-by: GaltRanch <bruno@nexocore.uy>
---
 .github/workflows/validation-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/validation-test.yml b/.github/workflows/validation-test.yml
index c85cead..b82d606 100644
--- a/.github/workflows/validation-test.yml
+++ b/.github/workflows/validation-test.yml
@@ -29,7 +29,7 @@ jobs:
       should_skip: ${{ steps.skip_check.outputs.should_skip }}
     steps:
       - id: skip_check
-        uses: fkirc/skip-duplicate-actions@master
+        uses: fkirc/skip-duplicate-actions@04a1aebece824b56e6ad6a401d015479cd1c50b3 # master
         with:
           concurrent_skipping: 'same_content'
           skip_after_successful_duplicate: 'true'