From fd376b17ce08fb0ab0e9bbf91df499be11e32b0c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Tue, 31 Mar 2026 10:40:45 +0000
Subject: [PATCH] fix: pin GitHub Actions to full SHA (CLOUDEVOPS-4942)

---
 .github/workflows/sourceguard.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/sourceguard.yml b/.github/workflows/sourceguard.yml
index cd3e727..9353552 100644
--- a/.github/workflows/sourceguard.yml
+++ b/.github/workflows/sourceguard.yml
@@ -7,7 +7,7 @@ jobs:
       image: sourceguard/sourceguard-cli
     steps:
       - name: Scan
-        uses: CheckPointSW/sourceguard-action@main
+        uses: CheckPointSW/sourceguard-action@ddeadaa391a6defb21ef4228b91956b062c27862 # main
         with:
           SG_CLIENT_ID: ${{ secrets.SG_CLIENT_ID }}
           SG_SECRET_KEY: ${{ secrets.SG_SECRET_KEY }}