From 27fe05c655f3d65f43ad9d16dd8dbd43d1fbb347 Mon Sep 17 00:00:00 2001
From: Rob Gilbreath <rob.gilbreath@pncit.com>
Date: Wed, 2 Sep 2026 13:34:32 -0800
Subject: [PATCH] ci: pin our deploy workflow's action refs to commit SHAs

---
 .github/workflows/master_cippkvupn.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/master_cippkvupn.yml b/.github/workflows/master_cippkvupn.yml
index 1bac90927c729..edbef348198d0 100644
--- a/.github/workflows/master_cippkvupn.yml
+++ b/.github/workflows/master_cippkvupn.yml
@@ -18,13 +18,13 @@ jobs:
     
     steps:
       - name: 'Checkout GitHub Action'
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
       
       - name: 'Run Azure Functions Action'
-        uses: Azure/functions-action@v1
+        uses: Azure/functions-action@c5060b3b8bb1ebbcb531abd00c822ecbaa8ea656 # v1.5.7
         id: fa
         with:
           app-name: 'cippkvupn'
           slot-name: 'Production'
           package: ${{ env.AZURE_FUNCTIONAPP_PACKAGE_PATH }}
-          publish-profile: ${{ secrets.AZUREAPPSERVICE_PUBLISHPROFILE_96E4A9290D1D4F3DA01D74E0BE6ED0E1 }}
\ No newline at end of file
+          publish-profile: ${{ secrets.AZUREAPPSERVICE_PUBLISHPROFILE_96E4A9290D1D4F3DA01D74E0BE6ED0E1 }}
\ No newline at end of file