From cc76eb958155eb87aba30ec8e299e5cb208038fe Mon Sep 17 00:00:00 2001
From: mulhern <amulhern@redhat.com>
Date: Tue, 25 Aug 2026 13:53:14 -0400
Subject: [PATCH] Pin checkout action to SHA

This is one technique for guarding against supply chain attacks.

Signed-off-by: mulhern <amulhern@redhat.com>
---
 .github/workflows/reusable_general.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/reusable_general.yml b/.github/workflows/reusable_general.yml
index 1b51e68..004417c 100644
--- a/.github/workflows/reusable_general.yml
+++ b/.github/workflows/reusable_general.yml
@@ -15,7 +15,7 @@ jobs:
     container:
       image: quay.io/fedora/fedora:${{ inputs.fedora-container-image-number }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a
         with:
           persist-credentials: false
       - name: Install dependencies