Merge pull request #2541 from vamshi-stepsecurity/feat/pin-using-action-commit-map

update value field in Action Commit map

Author: sailikhith-stepsecurity

remediation/workflow/pin/pinactions.go

@@ -76,7 +76,7 @@ func PinAction(action, inputYaml string, exemptedActions []string, pinToImmutabl
 		// Check case-insensitively by iterating through the map
 		for mapAction, actionWithCommit := range actionCommitMap {
 			if strings.EqualFold(action, mapAction) && actionWithCommit != "" {
-				commitSHA = strings.Split(actionWithCommit, "@")[1]
+				commitSHA = actionWithCommit
 
 				if !semanticTagRegex.MatchString(tagOrBranch) {
 					tagOrBranch, err = getSemanticVersion(client, owner, repo, tagOrBranch, commitSHA)

remediation/workflow/pin/pinactions_test.go

@@ -328,8 +328,8 @@ func TestPinActions(t *testing.T) {
 
 		if tt.fileName == "pinusingmap.yml" {
 			actionCommitMap = map[string]string{
-				"peter-evans-test/close-issue@v1": "peter-evans-test/close-issue@a700eac5bf2a1c7a8cb6da0c13f93ed96fd53vam",
-				"peter-check/[email protected]":  "peter-check/close-issue@a700eac5bf2a1c7a8cb6da0c13f93ed96fd53tom",
+				"peter-evans-test/close-issue@v1": "a700eac5bf2a1c7a8cb6da0c13f93ed96fd53vam",
+				"peter-check/[email protected]":  "a700eac5bf2a1c7a8cb6da0c13f93ed96fd53tom",
 			}
 		}