From 5ca2917567523bfdc71db871fe2b89243f5c61e1 Mon Sep 17 00:00:00 2001
From: Devon Bautista <17506592+synackd@users.noreply.github.com>
Date: Wed, 16 Sep 2026 10:17:37 -0600
Subject: [PATCH] ci: bump OpenCHAMI action to v3.10; use hash

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.github.com>
---
 .github/workflows/Release.yml   | 2 +-
 .github/workflows/security.yaml | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/Release.yml b/.github/workflows/Release.yml
index c6b08653..d1234352 100644
--- a/.github/workflows/Release.yml
+++ b/.github/workflows/Release.yml
@@ -44,7 +44,7 @@ jobs:
     needs:
       - go-version
       - stress-tests
-    uses: OpenCHAMI/github-actions/.github/workflows/go-build-release.yml@v3.2
+    uses: OpenCHAMI/github-actions/.github/workflows/go-build-release.yml@c07065a1a490d5576e5ef210dd0c6627f9358fed # v3.10
     with:
       cgo-enabled: "1"
       go-version: ${{ needs.go-version.outputs.version }}
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index 216938e1..a0e355c4 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -20,7 +20,7 @@ permissions:
 jobs:
   govulncheck:
     name: govulncheck
-    uses: OpenCHAMI/github-actions/.github/workflows/govulncheck.yml@464e059fbd56372b085ea7956712d41bd6df59d0 # v3.6
+    uses: OpenCHAMI/github-actions/.github/workflows/govulncheck.yml@c07065a1a490d5576e5ef210dd0c6627f9358fed # v3.10
     with:
       go-package: ./...
 
@@ -30,7 +30,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    uses: OpenCHAMI/github-actions/.github/workflows/dependency-review.yml@464e059fbd56372b085ea7956712d41bd6df59d0 # v3.6
+    uses: OpenCHAMI/github-actions/.github/workflows/dependency-review.yml@c07065a1a490d5576e5ef210dd0c6627f9358fed # v3.10
     with:
       fail-on-severity: high
       comment-summary-in-pr: never
@@ -40,4 +40,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: OpenCHAMI/github-actions/.github/workflows/lint-workflows.yml@464e059fbd56372b085ea7956712d41bd6df59d0 # v3.6
+    uses: OpenCHAMI/github-actions/.github/workflows/lint-workflows.yml@c07065a1a490d5576e5ef210dd0c6627f9358fed # v3.10