From 3de59803cc3c395f9c3bb2c33bc2bb8fc36736a6 Mon Sep 17 00:00:00 2001
From: Salvydas Lukosius <ss-o@users.noreply.github.com>
Date: Sat, 16 May 2026 10:23:42 +0100
Subject: [PATCH] ci: pin checkout SHA; explicitly checkout z-shell/zd in
 reusable workflow

---
 .github/workflows/test-native.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test-native.yml b/.github/workflows/test-native.yml
index 526ff80..b0e0623 100644
--- a/.github/workflows/test-native.yml
+++ b/.github/workflows/test-native.yml
@@ -44,7 +44,9 @@ jobs:
       matrix:
         file: [annexes, ice, packages, plugins, snippets]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          repository: z-shell/zd
 
       - name: Install zsh
         run: sudo apt-get update && sudo apt-get install -yq zsh