From 123cbea83ac023df69198abea98549a45d576d6b Mon Sep 17 00:00:00 2001
From: "ospk8s-renovate[bot]"
 <296544045+ospk8s-renovate[bot]@users.noreply.github.com>
Date: Tue, 18 Aug 2026 13:56:05 +0000
Subject: [PATCH] [main] Update GitHub Actions Dependencies

---
 .github/workflows/build-and-push.yaml    | 6 +++---
 .github/workflows/govulncheck.yaml       | 2 +-
 .github/workflows/pre-commit.yaml        | 4 ++--
 .github/workflows/unit-tests.yaml        | 2 +-
 .github/workflows/verify-generation.yaml | 6 +++---
 5 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/build-and-push.yaml b/.github/workflows/build-and-push.yaml
index f3b573c..49f18c5 100644
--- a/.github/workflows/build-and-push.yaml
+++ b/.github/workflows/build-and-push.yaml
@@ -17,10 +17,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: "go.mod"
 
@@ -57,7 +57,7 @@ jobs:
           echo "CATALOG_IMAGE_LATEST=$CATALOG_IMAGE_LATEST" >> $GITHUB_ENV
 
       - name: Install operator-sdk
-        uses: redhat-actions/openshift-tools-installer@v1
+        uses: redhat-actions/openshift-tools-installer@e3b32c2ab7b064b2ce189121c4a49f509a99a7b4 # v3
         with:
           source: github
           operator-sdk: 1.38.0
diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml
index 5841f92..6e5b3a6 100644
--- a/.github/workflows/govulncheck.yaml
+++ b/.github/workflows/govulncheck.yaml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: "go.mod"
 
diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml
index b26bf76..f2cedfd 100644
--- a/.github/workflows/pre-commit.yaml
+++ b/.github/workflows/pre-commit.yaml
@@ -12,10 +12,10 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v5
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
     - name: Set up Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
       with:
         go-version-file: "go.mod"
 
diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml
index 30faf89..ed1ec4f 100644
--- a/.github/workflows/unit-tests.yaml
+++ b/.github/workflows/unit-tests.yaml
@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: "go.mod"
 
diff --git a/.github/workflows/verify-generation.yaml b/.github/workflows/verify-generation.yaml
index 8185b0b..6f026e1 100644
--- a/.github/workflows/verify-generation.yaml
+++ b/.github/workflows/verify-generation.yaml
@@ -12,15 +12,15 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
     - name: Set up Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
       with:
         go-version-file: "go.mod"
 
     - name: Install operator-sdk
-      uses: redhat-actions/openshift-tools-installer@v1
+      uses: redhat-actions/openshift-tools-installer@e3b32c2ab7b064b2ce189121c4a49f509a99a7b4 # v3
       with:
         source: github
         operator-sdk: 1.38.0