From 23f3d0469dc3d1581a17044e5975b34f016b2629 Mon Sep 17 00:00:00 2001
From: Joachim Krech <8290187+jkrech@users.noreply.github.com>
Date: Wed, 12 Aug 2026 10:50:14 +0200
Subject: [PATCH 1/4] pin version of action

---
 .github/workflows/CubeMX-CI.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/CubeMX-CI.yml b/.github/workflows/CubeMX-CI.yml
index 5c888a6..f65f1f7 100644
--- a/.github/workflows/CubeMX-CI.yml
+++ b/.github/workflows/CubeMX-CI.yml
@@ -20,15 +20,15 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       - name: Install tools
-        uses: ARM-software/cmsis-actions/vcpkg@v1
+        uses: ARM-software/cmsis-actions/vcpkg@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
         with:
           config: ".ci/vcpkg-configuration.json"
 
       - name: Activate Arm tool license
-        uses: ARM-software/cmsis-actions/armlm@v1
+        uses: ARM-software/cmsis-actions/armlm@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
 
       - name: Build project with AC6
         working-directory: ./CubeMX/

From d06c91a545bfe58918356863cb180be5e881e1ef Mon Sep 17 00:00:00 2001
From: Joachim Krech <8290187+jkrech@users.noreply.github.com>
Date: Wed, 12 Aug 2026 10:54:38 +0200
Subject: [PATCH 2/4] pin action versions

---
 .github/workflows/DualCore-CI.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/DualCore-CI.yml b/.github/workflows/DualCore-CI.yml
index e3d1009..bf2c473 100644
--- a/.github/workflows/DualCore-CI.yml
+++ b/.github/workflows/DualCore-CI.yml
@@ -20,22 +20,22 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       - name: Install tools
-        uses: ARM-software/cmsis-actions/vcpkg@v1
+        uses: ARM-software/cmsis-actions/vcpkg@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
         with:
           config: ".ci/vcpkg-configuration.json"
 
       - name: Activate Arm tool license
-        uses: ARM-software/cmsis-actions/armlm@v1
+        uses: ARM-software/cmsis-actions/armlm@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
 
       - name: Build HelloWorld with AC6 and all contexts
         working-directory: ./DualCore/
         run: cbuild HelloWorld.csolution.yml --packs --toolchain AC6
 
       - name: Upload HelloWorld AC6 build Artifacts
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
         with:
           name: HelloWorld_AC6
           path: |

From 27f3fd890b59af9e66ab925f1d08f7cbd76bed5f Mon Sep 17 00:00:00 2001
From: Joachim Krech <8290187+jkrech@users.noreply.github.com>
Date: Wed, 12 Aug 2026 10:58:34 +0200
Subject: [PATCH 3/4] pin action versions

---
 .github/workflows/Hello-CI.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/Hello-CI.yml b/.github/workflows/Hello-CI.yml
index c4c8e81..8d08b39 100644
--- a/.github/workflows/Hello-CI.yml
+++ b/.github/workflows/Hello-CI.yml
@@ -31,18 +31,18 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       - name: Install tools
-        uses: ARM-software/cmsis-actions/vcpkg@v1
+        uses: ARM-software/cmsis-actions/vcpkg@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
         with:
           config: ".ci/vcpkg-configuration.json"
 
       - name: Activate Arm tool license
-        uses: ARM-software/cmsis-actions/armlm@v1
+        uses: ARM-software/cmsis-actions/armlm@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
 
       - name: Set up Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 #v7.0.0
         with:
           python-version: '3.14'
 

From 3098323daaed386e9dc3b74e5654c249b0ce6b8e Mon Sep 17 00:00:00 2001
From: Joachim Krech <8290187+jkrech@users.noreply.github.com>
Date: Wed, 12 Aug 2026 11:00:10 +0200
Subject: [PATCH 4/4] pin action version

---
 .github/workflows/SimpleTZ-CI.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/SimpleTZ-CI.yml b/.github/workflows/SimpleTZ-CI.yml
index d8e5175..a60f1b2 100644
--- a/.github/workflows/SimpleTZ-CI.yml
+++ b/.github/workflows/SimpleTZ-CI.yml
@@ -31,18 +31,18 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       - name: Install tools
-        uses: ARM-software/cmsis-actions/vcpkg@v1
+        uses: ARM-software/cmsis-actions/vcpkg@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
         with:
           config: ".ci/vcpkg-configuration.json"
 
       - name: Activate Arm tool license
-        uses: ARM-software/cmsis-actions/armlm@v1
+        uses: ARM-software/cmsis-actions/armlm@8a50b77681a484568e08f31fb7c2285c4735f682 #v1.3
 
       - name: Set up Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 #v7.0.0
         with:
           python-version: '3.14'