From 159e89eee53893ef370fb46ccc023fec496ff7c7 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sat, 15 Aug 2026 04:23:06 +0000
Subject: [PATCH] fix:
 yaml.github-actions.security.github-actions-mutable-action-tag.github-actions-mutable-action-tag
 security vulnerability

Automated security fix generated by OrbisAI Security
---
 .github/oldworkflows/main.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/oldworkflows/main.yml b/.github/oldworkflows/main.yml
index e2a04fe6..275dbc1b 100644
--- a/.github/oldworkflows/main.yml
+++ b/.github/oldworkflows/main.yml
@@ -20,29 +20,29 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5  # v2.7.0
 
       # Set up the Java environment
       - name: Set up JDK 1.8
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381f1c1e99d49  # v1.4.4
         with:
           java-version: 1.8
 
       # Kick off JBake and bake
-      - uses: eskatos/gradle-command-action@v1
+      - uses: eskatos/gradle-command-action@d42b89ae1dc7ee62c9a86bb51b13fbd0c4cae5f4  # v1.3.3
         with:
           arguments: bake
 
       # Log in to Azure
       - name: Azure Login
-        uses: azure/login@v1
+        uses: azure/login@77f1b2e3fb80c0e8645114159d17008b8a2e475a  # v1.4.6
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           allow-no-subscriptions: true
       
       # Batch-upload the output/ contents
       - name: Azure CLI script
-        uses: azure/CLI@v1
+        uses: azure/CLI@b143de62e0cbf4cde59da2a04e7b9880c2e0c86a  # v1.0.9
         with:
           inlineScript: |
             az storage blob upload-batch --overwrite -s $GITHUB_WORKSPACE/build/output -d \$web --connection-string "DefaultEndpointsProtocol=https;AccountName=researchstorage;AccountKey=${{ secrets.AZURE_LICENSE_KEY }};EndpointSuffix=core.windows.net"