From b8c3bd04a6d749ca1403ba9cd974cbad1e559f10 Mon Sep 17 00:00:00 2001
From: Bruno Silva <73999905+cx-bruno-silva@users.noreply.github.com>
Date: Wed, 25 Mar 2026 17:57:42 +0000
Subject: [PATCH] Update workflows to use SHA

---
 .github/workflows/publish.yml      | 6 +++---
 .github/workflows/test_action.yaml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d98b4ea..897b36c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -10,12 +10,12 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
-    - uses: haya14busa/action-update-semver@v1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
+    - uses: haya14busa/action-update-semver@7d2c558640ea49e798d46539536190aff8c18715 #v1.5.1
       with:
         major_version_tag_only: true
     - name: Create a Release
-      uses: actions/create-release@v1
+      uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e #v1.1.4
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
       with:
diff --git a/.github/workflows/test_action.yaml b/.github/workflows/test_action.yaml
index 996354a..f5920b9 100644
--- a/.github/workflows/test_action.yaml
+++ b/.github/workflows/test_action.yaml
@@ -8,7 +8,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
       - run: mkdir -p myoutput
       - name: Test KICS action
         uses: ./