From 7c4dcdee086ff1e679d3d03cdfe0e0a6bbd04569 Mon Sep 17 00:00:00 2001
From: Koral Kulacoglu <koralkulacoglu168@bitgo.com>
Date: Wed, 1 Oct 2025 16:04:49 -0400
Subject: [PATCH] fix: pin GitHub Actions to SHA hashes

Task: DX-1985
---
 .github/workflows/ci.yaml      | 2 +-
 .github/workflows/release.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 00209e10..4cd2894c 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -6,4 +6,4 @@ on:
 
 jobs:
   test:
-    uses: semantic-release-action/typescript/.github/workflows/ci.yml@v3
+    uses: semantic-release-action/typescript/.github/workflows/ci.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51 # v3.0.20
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 132951c0..1276a190 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ on:
 
 jobs:
   release:
-    uses: semantic-release-action/typescript/.github/workflows/release.yml@v3
+    uses: semantic-release-action/typescript/.github/workflows/release.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51 # v3.0.20
     secrets:
       npm-token: ${{ secrets.NPM_TOKEN }}
     with: