Tests: refresh checkout v4 live fixture

Author: nodeselector

test/integration/run.rb

@@ -346,7 +346,7 @@ def golden_json_diff(expected, actual, path)
 
 # ── Fixture data ────────────────────────────────────────────────────────
 
-CHECKOUT_SHA      = "de0fac2e4500dabe0009e67214ff5f5447ce83dd"
+CHECKOUT_SHA      = "11d5960a326750d5838078e36cf38b85af677262"
 SETUP_GO_SHA      = "4a3601121dd01d1626a1e23e37211e3254c1c06c"
 CACHE_SHA         = "27d5ce7f107fe9357f9df03efb73ab90386fccae"
 MAIN_BRANCH_SHA   = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"

test/scenarios/catalog.yml

@@ -1687,7 +1687,7 @@ scenarios:
                 hash_algo: sha1
                 nwo: actions/checkout
                 ref: v4
-                sha: de0fac2e4500dabe0009e67214ff5f5447ce83dd
+                sha: 11d5960a326750d5838078e36cf38b85af677262
             findings: []
             path: .github/workflows/ci.yml
             valid: true
@@ -1782,7 +1782,7 @@ scenarios:
                 hash_algo: sha1
                 nwo: actions/checkout
                 ref: v4
-                sha: de0fac2e4500dabe0009e67214ff5f5447ce83dd
+                sha: 11d5960a326750d5838078e36cf38b85af677262
             findings:
               - category: onboarding-required
                 confidence: high
@@ -1860,7 +1860,7 @@ scenarios:
                 hash_algo: sha1
                 nwo: actions/checkout
                 ref: v4
-                sha: de0fac2e4500dabe0009e67214ff5f5447ce83dd
+                sha: 11d5960a326750d5838078e36cf38b85af677262
             findings: []
             path: .github/workflows/ci.yml
             valid: true
@@ -1937,7 +1937,7 @@ scenarios:
         - "version: 'v0.0.2'"
         - "'actions/checkout@v4':"
         - "ref: 'v4'"
-        - "commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd'"
+        - "commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'"
 
   - name: dbot_impostor_blocks
     category: dependabot
@@ -1993,7 +1993,7 @@ scenarios:
           - category: unreachable-pin
             confidence: high
             dependency: actions/checkout@v4
-            detail: "pinned de0fac2e4500 is not an ancestor of bbbbbbbbbbbb \u2014 lockfile may have been tampered with"
+            detail: "pinned 11d5960a3267 is not an ancestor of bbbbbbbbbbbb \u2014 lockfile may have been tampered with"
             doc_url: "https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions"
             remediation: "investigate immediately \u2014 verify the lockfile entry against upstream history"
             severity: error
@@ -2042,7 +2042,7 @@ scenarios:
         - "'actions/checkout@main':"
         - "ref: 'main'"
         - "commit: 'sha1-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'"
-      lockfile_comment_excludes: "de0fac2e4500dabe0009e67214ff5f5447ce83dd"
+      lockfile_comment_excludes: "11d5960a326750d5838078e36cf38b85af677262"
 
   - name: onboard_roundtrip_v002
     category: onboarding