Pin Process-PSModule workflow reference to immutable SHA

[Marius Storhaug (MariusStorhaug)]

The CI workflow reference is now pinned to a specific commit SHA, consistent with all other uses: references in the PSModule infrastructure. Dependabot will automatically propose updates when new versions of Process-PSModule are released.

Changed: Workflow reference pinned to immutable SHA

The Process-PSModule reusable workflow reference in .github/workflows/Process-PSModule.yml was using a mutable major version tag (@v5). It is now pinned to the exact commit SHA with the patch-level version in a trailing comment:

# Beforeuses: PSModule/Process-PSModule/.github/workflows/workflow.yml@v5# Afteruses: PSModule/Process-PSModule/.github/workflows/workflow.yml@4343d76f9e8c9468527175ea292092c2d055be8c # v5.4.5

Dependabot's github-actions ecosystem is already configured and will keep this reference up to date automatically.

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Pins the reusable Process-PSModule GitHub Actions workflow to an immutable commit SHA to reduce supply-chain risk and align with the repo’s convention for uses: references.

Changes:

• Updated .github/workflows/Process-PSModule.yml to reference PSModule/Process-PSModule by commit SHA instead of mutable @v5
• Added an inline comment indicating the corresponding version (v5.4.5)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Commit-SHA pinning is good, but inline version comments can become stale if the SHA is updated without updating # v5.4.5. To avoid drift, consider either (a) removing the version comment, or (b) adding a lightweight check (e.g., in CI or a scheduled job) that verifies the comment matches the referenced commit/tag.

Suggested change

	uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@4343d76f9e8c9468527175ea292092c2d055be8c# v5.4.5
	uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@4343d76f9e8c9468527175ea292092c2d055be8c