From 8cb2607c63cc16405e66e623c39f5a22b53db908 Mon Sep 17 00:00:00 2001
From: Marian Steinbach <marian@giantswarm.io>
Date: Sat, 7 Feb 2026 09:29:45 +0100
Subject: [PATCH] Pin install-binary-action to commit SHA

Replace floating major version tag reference with pinned commit SHA
to prepare for discontinuation of floating tags.

Related: https://github.com/giantswarm/roadmap/issues/4166

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/validate.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml
index ee3c1f81..73d78b4b 100644
--- a/.github/workflows/validate.yaml
+++ b/.github/workflows/validate.yaml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - run: sudo apt-get install -y yamllint
       - run: curl -s https://fluxcd.io/install.sh | sudo bash
-      - uses: giantswarm/install-binary-action@v1
+      - uses: giantswarm/install-binary-action@6bf58e5afe7e9cb950088ac2aee9cbd9b7889dc6 # v1.1.0
         with:
           binary: kubeconform
           download_url: "https://github.com/yannh/kubeconform/releases/download/v${version}/kubeconform-linux-amd64.tar.gz"
@@ -99,7 +99,7 @@ jobs:
       - run: sudo apt-get install -y yamllint
       - run: curl -s https://fluxcd.io/install.sh | sudo bash
       - name: install dyff
-        uses: giantswarm/install-binary-action@v1
+        uses: giantswarm/install-binary-action@6bf58e5afe7e9cb950088ac2aee9cbd9b7889dc6 # v1.1.0
         with:
           binary: dyff
           download_url: "https://github.com/homeport/dyff/releases/download/v${version}/dyff_${version}_linux_amd64.tar.gz"
@@ -107,7 +107,7 @@ jobs:
           tarball_binary_path: "${binary}"
           version: ${{ env.dyff_ver }}
       - run: which dyff
-      - uses: giantswarm/install-binary-action@v1
+      - uses: giantswarm/install-binary-action@6bf58e5afe7e9cb950088ac2aee9cbd9b7889dc6 # v1.1.0
         with:
           binary: kubeconform
           download_url: "https://github.com/yannh/kubeconform/releases/download/v${version}/kubeconform-linux-amd64.tar.gz"
@@ -166,7 +166,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: install apptestctl
-        uses: giantswarm/install-binary-action@v1
+        uses: giantswarm/install-binary-action@6bf58e5afe7e9cb950088ac2aee9cbd9b7889dc6 # v1.1.0
         with:
           binary: apptestctl
           download_url: "https://github.com/giantswarm/apptestctl/releases/download/v${version}/apptestctl-v${version}-linux-amd64.tar.gz"