Zohaib Hassnain 42afc06003 ci: refresh github/codeql-action pin to current v4 (#986) ...

The pin was 5595ccaf..., but upstream has since moved the v4 tag to
ff2f1c62.... The Verify Action Pins workflow flags this drift on every
PR that touches any workflow file, regardless of whether that PR
changed codeql.yml or defender-for-devops.yml.

Verified the new SHA against the GitHub API directly (not just the CI
error text) and confirmed .github/scripts/verify-action-pins.sh passes
clean locally (40/40 action references OK, exit 0).

2026-08-14 22:18:46 +05:00

..

benchmark.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

ci.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

codeql.yml

ci: refresh github/codeql-action pin to current v4 (#986)

2026-08-14 22:18:46 +05:00

defender-for-devops.yml

ci: refresh github/codeql-action pin to current v4 (#986)

2026-08-14 22:18:46 +05:00

docs.yml

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30

release.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

security-scan.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

security.yml

ci: pin Python dependencies in requirements-ci.txt for reproducible CI (#945)

2026-08-14 22:10:23 +05:00

verify-action-pins.yml

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30