From 2e9528e549375252b1f3319f1d26c2034d3ed3e2 Mon Sep 17 00:00:00 2001
From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com>
Date: Mon, 18 May 2026 16:36:28 +0200
Subject: [PATCH 1/2] Downgrade actions/checkout version from v6 to v5

---
 .github/workflows/permissions-advisor-reusable.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/permissions-advisor-reusable.yml b/.github/workflows/permissions-advisor-reusable.yml
index 884f6ca..e8a5e7e 100644
--- a/.github/workflows/permissions-advisor-reusable.yml
+++ b/.github/workflows/permissions-advisor-reusable.yml
@@ -26,10 +26,10 @@ jobs:
     
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v5
       
       - name: Run Advisor
         uses: GitHubSecurityLab/actions-permissions/advisor@v1
         with:
           name: ${{ inputs.workflow_name }}
-          count: ${{ inputs.run_count }}
\ No newline at end of file
+          count: ${{ inputs.run_count }}

From d639ad8b676205a4b6e6c5924061140ab79df203 Mon Sep 17 00:00:00 2001
From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com>
Date: Mon, 18 May 2026 16:40:53 +0200
Subject: [PATCH 2/2] Update .github/workflows/permissions-advisor-reusable.yml

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 .github/workflows/permissions-advisor-reusable.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/permissions-advisor-reusable.yml b/.github/workflows/permissions-advisor-reusable.yml
index e8a5e7e..49f3bc5 100644
--- a/.github/workflows/permissions-advisor-reusable.yml
+++ b/.github/workflows/permissions-advisor-reusable.yml
@@ -26,7 +26,7 @@ jobs:
     
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       
       - name: Run Advisor
         uses: GitHubSecurityLab/actions-permissions/advisor@v1