From 092a811a61a075e2dd879d3c7414fd07f360953a Mon Sep 17 00:00:00 2001
From: adel <254727879+adel-pplx@users.noreply.github.com>
Date: Thu, 28 May 2026 17:23:49 +0100
Subject: [PATCH] ci: pin govulncheck to v1.3.0

Avoid pulling an unpinned upstream tag in CI. Matches the
SHA-pinned style used for the other actions in this workflow.

Fixes #18
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e213c7a..6acdeab 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -66,7 +66,7 @@ jobs:
           check-latest: true
 
       - name: install govulncheck
-        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+        run: go install golang.org/x/vuln/cmd/govulncheck@v1.3.0
 
       - name: govulncheck
         run: govulncheck ./...