From 6d135614a501f1d693271dc3cb178701cc00a870 Mon Sep 17 00:00:00 2001 From: Joshua Temple Date: Sat, 4 Jul 2026 20:59:24 -0400 Subject: [PATCH] ci(validate): pin govulncheck to an immutable commit Signed-off-by: Joshua Temple --- .github/workflows/validate.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml index ddd4b35f..ae16344d 100644 --- a/.github/workflows/validate.yaml +++ b/.github/workflows/validate.yaml @@ -93,11 +93,11 @@ jobs: cache: true - name: Run govulncheck - run: go run golang.org/x/vuln/cmd/govulncheck@v1.3.0 ./... + run: go run golang.org/x/vuln/cmd/govulncheck@0782b76014f15f24e22a438f30f308df42899ba1 ./... # v1.3.0 - name: Run govulncheck (e2e module) working-directory: e2e - run: go run golang.org/x/vuln/cmd/govulncheck@v1.3.0 ./... + run: go run golang.org/x/vuln/cmd/govulncheck@0782b76014f15f24e22a438f30f308df42899ba1 ./... # v1.3.0 validate: name: Validation Gate