From a77236208b91a565f2c0f9ef958c4362960fbc95 Mon Sep 17 00:00:00 2001
From: ry-ops <78445050+ry-ops@users.noreply.github.com>
Date: Fri, 8 May 2026 02:01:56 -0500
Subject: [PATCH 1/2] ci: pin setup-kubectl, setup-helm to commit SHA

---
 .github/workflows/helm-dispatch.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/helm-dispatch.yml b/.github/workflows/helm-dispatch.yml
index 562f08d..1e98b6e 100644
--- a/.github/workflows/helm-dispatch.yml
+++ b/.github/workflows/helm-dispatch.yml
@@ -79,12 +79,12 @@ jobs:
           chmod 600 ~/.kube/config
 
       - name: Install kubectl + helm
-        uses: azure/setup-kubectl@v4
+        uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
         with:
           version: 'v1.33.0'
 
       - name: Install Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
         with:
           version: 'v3.17.0'
 

From 45720341734ac60505fb6197b9eb5937de87b0b1 Mon Sep 17 00:00:00 2001
From: ry-ops <78445050+ry-ops@users.noreply.github.com>
Date: Fri, 8 May 2026 02:01:57 -0500
Subject: [PATCH 2/2] ci: pin setup-kubectl to commit SHA

---
 .github/workflows/kubectl-dispatch.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/kubectl-dispatch.yml b/.github/workflows/kubectl-dispatch.yml
index 598d29b..468e3bd 100644
--- a/.github/workflows/kubectl-dispatch.yml
+++ b/.github/workflows/kubectl-dispatch.yml
@@ -59,7 +59,7 @@ jobs:
           chmod 600 ~/.kube/config
 
       - name: Install kubectl
-        uses: azure/setup-kubectl@v4
+        uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
         with:
           version: 'v1.33.0'