From 0900cf665d626b61018e0c367a7b2855eeb1cda7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Feb 2026 03:15:02 +0000
Subject: [PATCH] Update actions/checkout action to v6

---
 .github/workflows/build-and-analyze-fork.yml   | 2 +-
 .github/workflows/build-and-analyze.yml        | 4 ++--
 .github/workflows/codeql-analysis.yml          | 2 +-
 .github/workflows/container-scan.yml           | 2 +-
 .github/workflows/create-pnd-issues.yml        | 4 ++--
 .github/workflows/infrastructure-template.yaml | 4 ++--
 .github/workflows/pep-dotnet-test.yml          | 2 +-
 .github/workflows/pep-test-and-analyze.yml     | 2 +-
 .github/workflows/publish-abac-nuget.yml       | 2 +-
 .github/workflows/publish-pep-nuget.yml        | 2 +-
 10 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/build-and-analyze-fork.yml b/.github/workflows/build-and-analyze-fork.yml
index 841dc77de..8047f5c11 100644
--- a/.github/workflows/build-and-analyze-fork.yml
+++ b/.github/workflows/build-and-analyze-fork.yml
@@ -15,7 +15,7 @@ jobs:
           dotnet-version: |
             8.0.x
             3.1.x
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
 
diff --git a/.github/workflows/build-and-analyze.yml b/.github/workflows/build-and-analyze.yml
index 8659f8bf1..e4f515c33 100644
--- a/.github/workflows/build-and-analyze.yml
+++ b/.github/workflows/build-and-analyze.yml
@@ -12,7 +12,7 @@ jobs:
     if: ((github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false) || github.event_name == 'push') && github.repository_owner == 'Altinn' && github.actor != 'dependabot[bot]' 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Set inotify watchers
         run: echo fs.inotify.max_user_watches=524288 | sudo tee -a /etc/sysctl.conf && sudo sysctl -p
       - name: Set inotify instances
@@ -41,7 +41,7 @@ jobs:
         with:
           distribution: 'microsoft'
           java-version: 17
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Cache SonarCloud packages
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index bb73df89e..5340de9c5 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - name: Setup .NET 8.0.* SDK
       uses: actions/setup-dotnet@v4
       with:
diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml
index 24bd95605..d78d1db14 100644
--- a/.github/workflows/container-scan.yml
+++ b/.github/workflows/container-scan.yml
@@ -18,7 +18,7 @@ jobs:
   scan:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - name: Build the Docker image
       run: docker build . --tag altinn-authorization:${{github.sha}}
 
diff --git a/.github/workflows/create-pnd-issues.yml b/.github/workflows/create-pnd-issues.yml
index 056dfa2df..fa0429614 100644
--- a/.github/workflows/create-pnd-issues.yml
+++ b/.github/workflows/create-pnd-issues.yml
@@ -15,7 +15,7 @@ jobs:
       issues: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - uses: actions/setup-node@v4
         with:
@@ -58,7 +58,7 @@ jobs:
       issues: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/infrastructure-template.yaml b/.github/workflows/infrastructure-template.yaml
index 66a75d7ca..c1ccd3b26 100644
--- a/.github/workflows/infrastructure-template.yaml
+++ b/.github/workflows/infrastructure-template.yaml
@@ -28,7 +28,7 @@ jobs:
     environment: ${{ inputs.environment }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Terraform Set TFVARS
         run: echo "TF_VARS_FILE=$(echo ${{ inputs.environment }} | tr '[:upper:]' '[:lower:]').tfvars" >> $GITHUB_ENV
@@ -53,7 +53,7 @@ jobs:
     if: inputs.tf_should_apply
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Terraform Initialize
         uses: altinn/altinn-platform/actions/terraform/plan@main
diff --git a/.github/workflows/pep-dotnet-test.yml b/.github/workflows/pep-dotnet-test.yml
index 7971c2b2e..5fdd64573 100644
--- a/.github/workflows/pep-dotnet-test.yml
+++ b/.github/workflows/pep-dotnet-test.yml
@@ -26,7 +26,7 @@ jobs:
           dotnet-version: |
             6.0.x
             5.0.x
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Build
diff --git a/.github/workflows/pep-test-and-analyze.yml b/.github/workflows/pep-test-and-analyze.yml
index c0dd03069..e856e678f 100644
--- a/.github/workflows/pep-test-and-analyze.yml
+++ b/.github/workflows/pep-test-and-analyze.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           distribution: 'zulu'
           java-version: 17
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Cache SonarCloud packages
diff --git a/.github/workflows/publish-abac-nuget.yml b/.github/workflows/publish-abac-nuget.yml
index 9a176a03d..e1cd5d4ff 100644
--- a/.github/workflows/publish-abac-nuget.yml
+++ b/.github/workflows/publish-abac-nuget.yml
@@ -10,7 +10,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/Altinn.Authorization.ABAC-')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/publish-pep-nuget.yml b/.github/workflows/publish-pep-nuget.yml
index 3f5d7f042..10484734d 100644
--- a/.github/workflows/publish-pep-nuget.yml
+++ b/.github/workflows/publish-pep-nuget.yml
@@ -10,7 +10,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/Altinn.Common.PEP-')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0