Update Checkout Repository command

Author: shaun-nx

.github/workflows/build.yml

@@ -213,3 +213,19 @@ jobs:
         with:
           name: ${{ inputs.image }}-${{ steps.meta.outputs.version }}
           path: ${{ inputs.image }}-${{ steps.meta.outputs.version }}.tar
+
+
+      # - name: Run preflight
+      #   env:
+      #     PYXIS_API_TOKEN: ${{ secrets.PYXIS_API_TOKEN }}
+      #   run: preflight check container ${{ inputs.image }}:ubi > preflight-result.json
+
+      # - name: Check preflight results
+      #   run: |
+      #     failed_count=$(jq '.results.failed | length' preflight-result.json)
+      #     if [ "$failed_count" -ne 0 ]; then
+      #     echo "Preflight checks failed: $failed_count failed checks"
+      #     echo "Results for preflight-result.json:"
+      #     jq '.results.failed' preflight-result.json
+      #     exit 1
+      #     fi

.github/workflows/openshift-certification.yml

@@ -25,8 +25,10 @@ jobs:
   preflight:
     runs-on: ${{ inputs.runner }}
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
+    - name: Checkout Repository
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      with:
+        ref: ${{ (inputs.tag != '' && !inputs.dry_run ) && format('refs/tags/v{0}', inputs.tag) || github.ref }}
 
     - name: Download preflight binary
       run: |
@@ -38,7 +40,7 @@ jobs:
       uses: actions/download-artifact@v4
       with:
         name: ${{ inputs.image }}-${{ inputs.image_version }}
-    
+
     - name: List files after artifact download
       run: ls -l ${{ inputs.image }}-${{ inputs.image_version }}.tar