From 50d0aed02a5db49fa2e9b749e11d387eaa1cfd78 Mon Sep 17 00:00:00 2001
From: Roger Ng <rogerng@google.com>
Date: Mon, 11 Sep 2023 13:53:20 +0000
Subject: [PATCH] Pin golang/govulncheck-action by hash

---
 .github/workflows/govulncheck.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index c219c6a5e5..e82a5a797c 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -14,7 +14,7 @@ jobs:
     name: Run govulncheck
     steps:
       - id: govulncheck
-        uses: golang/govulncheck-action@v1.0.1
+        uses: golang/govulncheck-action@7da72f730e37eeaad891fcff0a532d27ed737cd4 # v1.0.1
         with:
-           go-version-input: 1.20.8
-           go-package: ./...
+          go-version-input: 1.20.8
+          go-package: ./...