From 4a7efbae46e3568c7ea51a8a50ac16eb9758bc9b Mon Sep 17 00:00:00 2001
From: clawbot <sneak+clawbot@sneak.cloud>
Date: Fri, 20 Feb 2026 03:10:52 -0800
Subject: [PATCH] security: pin all go install refs to commit SHAs

---
 .gitea/workflows/check.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/check.yml b/.gitea/workflows/check.yml
index 77089f2..3fc7536 100644
--- a/.gitea/workflows/check.yml
+++ b/.gitea/workflows/check.yml
@@ -13,6 +13,6 @@ jobs:
         with:
           go-version-file: go.mod
       - name: Install golangci-lint
-        run: go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
+        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee # v2.10.1
       - name: Run checks
         run: make check