From f267383a884bd43d83f90510c6895cb52edf588e Mon Sep 17 00:00:00 2001
From: irfanuddinahmad <iahmad@2u.com>
Date: Fri, 15 May 2026 15:28:55 +0500
Subject: [PATCH] chore: pin GitHub Actions to commit SHAs

Part of the org-wide SHA-pinning migration (openedx/.github#165).
Pins all pinnable action refs to full commit SHAs with version comments,
using pinact v3.10.0.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/workflows/ltistore-tests.yml           | 4 ++--
 .github/workflows/run-paragon-plugin-tests.yml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ltistore-tests.yml b/.github/workflows/ltistore-tests.yml
index e45b520..925f582 100644
--- a/.github/workflows/ltistore-tests.yml
+++ b/.github/workflows/ltistore-tests.yml
@@ -17,9 +17,9 @@ jobs:
         # All steps will run from this directory
         working-directory: plugins/tutor-contrib-ltistore
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Upgrade pip
diff --git a/.github/workflows/run-paragon-plugin-tests.yml b/.github/workflows/run-paragon-plugin-tests.yml
index cc6eb04..beef128 100644
--- a/.github/workflows/run-paragon-plugin-tests.yml
+++ b/.github/workflows/run-paragon-plugin-tests.yml
@@ -17,10 +17,10 @@ jobs:
         working-directory: plugins/tutor-contrib-paragon
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.12"