From b4be92e56ec67e340c4871b41a1b85467bd45d7d Mon Sep 17 00:00:00 2001
From: Maciej Mensfeld <maciej@mensfeld.pl>
Date: Thu, 5 Nov 2026 13:54:56 +0100
Subject: [PATCH] Require a full commit SHA for every action in
 verify-action-pins

---
 .github/workflows/verify-action-pins.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/verify-action-pins.yml b/.github/workflows/verify-action-pins.yml
index 01b0afc..8978548 100644
--- a/.github/workflows/verify-action-pins.yml
+++ b/.github/workflows/verify-action-pins.yml
@@ -1,15 +1,13 @@
 name: Verify Action Pins
-
 on:
   pull_request:
     paths:
       - '.github/workflows/**'
-
 jobs:
   verify_action_pins:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Check SHA pins
         run: |
           # Every remote action must be pinned to a full 40-character commit SHA. Local actions