From b6f0fe2801d722689de9d834ced524b0cce72348 Mon Sep 17 00:00:00 2001
From: Kevin van Zonneveld <kevin@vanzonneveld.net>
Date: Mon, 8 Jun 2026 19:52:54 +0200
Subject: [PATCH] Pin third-party GitHub Actions to SHAs

---
 .github/workflows/tuskit-ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tuskit-ci.yml b/.github/workflows/tuskit-ci.yml
index dc2224a5..d55e1ce4 100644
--- a/.github/workflows/tuskit-ci.yml
+++ b/.github/workflows/tuskit-ci.yml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Extract Branch Name
         run: echo "BRANCH=$(echo ${GITHUB_REF##*/})" >> $GITHUB_ENV
-      - uses: swift-actions/setup-swift@v2
+      - uses: swift-actions/setup-swift@7ca6abe6b3b0e8b5421b88be48feee39cbf52c6a
         with:
           swift-version: ${{ matrix.swift }}
       - name: Get swift version