From 4aee675b87da3d276cce3de7cb625ffea8a8099a Mon Sep 17 00:00:00 2001
From: "renovate-rancher[bot]"
 <119870437+renovate-rancher[bot]@users.noreply.github.com>
Date: Fri, 10 Jul 2026 05:51:04 +0000
Subject: [PATCH] Update GitHub Actions

---
 .github/workflows/add_issue.yaml | 2 +-
 .github/workflows/fossa.yml      | 4 ++--
 .github/workflows/release.yml    | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/add_issue.yaml b/.github/workflows/add_issue.yaml
index 56329a5..440501e 100644
--- a/.github/workflows/add_issue.yaml
+++ b/.github/workflows/add_issue.yaml
@@ -19,7 +19,7 @@ jobs:
           app-id: ${{ secrets.ADD_ISSUE_APP_ID }}
           private-key: ${{ secrets.ADD_ISSUE_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
-      - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
+      - uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd # v2.0.0
         with:
           project-url: https://github.com/orgs/neuvector/projects/15
           github-token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index 7e2fb16..7872a16 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -15,7 +15,7 @@ jobs:
     timeout-minutes: 30
     steps:
     - name: Checkout
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
     # The FOSSA token is shared between all repos in NeuVector's GH org. It can
     # be used directly and there is no need to request specific access to EIO.
@@ -26,7 +26,7 @@ jobs:
           secret/data/github/org/neuvector/fossa/credentials token | FOSSA_API_KEY_PUSH_ONLY
 
     - name: FOSSA scan
-      uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # v1.9.0
+      uses: fossas/fossa-action@29693cc50323968e039056be419b32989fc5880c # v2.0.0
       with:
         api-key: ${{ env.FOSSA_API_KEY_PUSH_ONLY }}
         # Only runs the scan and do not provide/returns any results back to the
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7009509..ab75da0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
     
     steps:
     - name: Checkout code
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
     - name: Load Secrets from Vault
       uses: rancher-eio/read-vault-secrets@7282bf97898cd1c16c89f837e0bb442e6d384c89