From 910b91e74e2596b6094fef7fac20c2607168df5b Mon Sep 17 00:00:00 2001
From: dagecko <cnyhuis@vigilantnow.com>
Date: Thu, 26 Mar 2026 04:57:11 -0400
Subject: [PATCH] fix: pin 5 unpinned action(s) (#6157)

---
 .github/workflows/check-for-spammy-issues.yml | 2 +-
 .github/workflows/pr-quality-check.yaml       | 6 +++---
 .github/workflows/site-deploy.yaml            | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/check-for-spammy-issues.yml b/.github/workflows/check-for-spammy-issues.yml
index 871ecc39..50c87f5d 100644
--- a/.github/workflows/check-for-spammy-issues.yml
+++ b/.github/workflows/check-for-spammy-issues.yml
@@ -9,6 +9,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: close issue
-        uses: balevine/mark-as-spam@v1.0
+        uses: balevine/mark-as-spam@9f9b68e6eaf35c84c5487b397182e792920039ba # v1.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/pr-quality-check.yaml b/.github/workflows/pr-quality-check.yaml
index 1a7392ed..3b29938d 100644
--- a/.github/workflows/pr-quality-check.yaml
+++ b/.github/workflows/pr-quality-check.yaml
@@ -86,7 +86,7 @@ jobs:
       contents: write
     steps:
       - name: Post quality report comment
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@70d2764d1a7d5d9560b100cbea0077fc8f633987 # v3
         with:
           header: pr-quality-check
           message: |
@@ -98,7 +98,7 @@ jobs:
 
       - name: Sync labels
         if: needs.quality.outputs.labels != ''
-        uses: actions-ecosystem/action-add-labels@v1
+        uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           labels: ${{ join(fromJson(needs.quality.outputs.labels), '\n') }}
@@ -118,7 +118,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Post skip notice
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@70d2764d1a7d5d9560b100cbea0077fc8f633987 # v3
         with:
           header: pr-quality-check
           message: |
diff --git a/.github/workflows/site-deploy.yaml b/.github/workflows/site-deploy.yaml
index 6576794a..ce2172fe 100644
--- a/.github/workflows/site-deploy.yaml
+++ b/.github/workflows/site-deploy.yaml
@@ -33,7 +33,7 @@ jobs:
         with:
           node-version: 20
       - name: deploy awesome-go.com
-        uses: nwtgck/actions-netlify@v3.0
+        uses: nwtgck/actions-netlify@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654 # v3.0
         with:
           publish-dir: "./out"
           production-branch: main