From 98dad2a02819bdc2627c896d618495f16f9d1bce Mon Sep 17 00:00:00 2001
From: ry-ops <78445050+ry-ops@users.noreply.github.com>
Date: Tue, 5 May 2026 14:35:33 -0500
Subject: [PATCH 1/2] ci: pin setup-kubectl, setup-helm to commit SHA

---
 .github/workflows/helm-dispatch.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/helm-dispatch.yml b/.github/workflows/helm-dispatch.yml
index 562f08d..1e98b6e 100644
--- a/.github/workflows/helm-dispatch.yml
+++ b/.github/workflows/helm-dispatch.yml
@@ -79,12 +79,12 @@ jobs:
           chmod 600 ~/.kube/config
 
       - name: Install kubectl + helm
-        uses: azure/setup-kubectl@v4
+        uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
         with:
           version: 'v1.33.0'
 
       - name: Install Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
         with:
           version: 'v3.17.0'
 

From 3d3b7dfa411edfe8a107933db2340288bb9599e7 Mon Sep 17 00:00:00 2001
From: ry-ops <78445050+ry-ops@users.noreply.github.com>
Date: Tue, 5 May 2026 14:35:34 -0500
Subject: [PATCH 2/2] ci: pin setup-kubectl to commit SHA

---
 .github/workflows/kubectl-dispatch.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/kubectl-dispatch.yml b/.github/workflows/kubectl-dispatch.yml
index 598d29b..468e3bd 100644
--- a/.github/workflows/kubectl-dispatch.yml
+++ b/.github/workflows/kubectl-dispatch.yml
@@ -59,7 +59,7 @@ jobs:
           chmod 600 ~/.kube/config
 
       - name: Install kubectl
-        uses: azure/setup-kubectl@v4
+        uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
         with:
           version: 'v1.33.0'