chore: pin actions

Signed-off-by: James Petersen <[email protected]>
edera-dev · Dec 13, 2024 · 4d80225 · 4d80225
1 parent f297dab
commit 4d80225
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/ci-actions.yaml b/.github/workflows/ci-actions.yaml
@@ -16,20 +16,20 @@ jobs:
       actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           persist-credentials: false
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@e4db8464a088ece1b920f60402e813ea4de65b8f # v4
 
       - name: Run zizmor
         run: uvx zizmor --pedantic --format sarif . > results.sarif 
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} 
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@faa06bd0c3efe9bf73685e4489e70f0f552edc63 # v3
         with:
           sarif_file: results.sarif
           category: zizmor