Pin action version in unix.yml

Signed-off-by: Nigel Jones <[email protected]>

.github/workflows/unix.yml

@@ -3,13 +3,13 @@ name: Linux and MacOS tests
 permissions:
   contents: read
 
-on: [ push, pull_request , workflow_dispatch]
+on: [ push, pull_request, workflow_dispatch ]
 
-env: 
+env:
   # Semi-colon separated list of algorithims with libjade implementations to
   # be passed as input to CMake option as: -DOQS_MINIMAL_BUILD=$LIBJADE_ALG_LIST
   # See CONFIGURE.md under ## OQS_MINIMAL_BUILD
-  LIBJADE_ALG_LIST: "KEM_kyber_512;KEM_kyber_768" 
+  LIBJADE_ALG_LIST: "KEM_kyber_512;KEM_kyber_768"
 
 jobs:
 
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup nix
-        uses: cachix/install-nix-action@v26
+        uses: cachix/install-nix-action@8887e596b4ee1134dae06b98d573bd674693f47c # pin@v26
       - name: Setup jasmin-compiler
         run: |
           nix-channel --add https://nixos.org/channels/nixos-23.11 nixpkgs && \
@@ -315,15 +315,15 @@ jobs:
           # Restrict -DOQS_LIBJADE_BUILD=ON build to algs provided by
           # libjade to minimise repeated tests
           - -DOQS_LIBJADE_BUILD=ON -DOQS_MINIMAL_BUILD=$LIBJADE_ALG_LIST
-        exclude: 
+        exclude:
           # macos-14 runs on aarch64, libjade targets x86
           # Skip testing libjade on macos-14
           - os: macos-14
             libjade-build: -DOQS_LIBJADE_BUILD=ON -DOQS_MINIMAL_BUILD=$LIBJADE_ALG_LIST
     runs-on: ${{ matrix.os }}
     steps:
       - name: Install Python
-        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # pin@v5
+        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # pin@v5
         with:
           python-version: '3.12'
       - name: Checkout code
@@ -396,7 +396,7 @@ jobs:
     container: openquantumsafe/ci-ubuntu-focal-x86_64:latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # pin@v4
       - name: Configure
         run: mkdir build && cd build && scan-build-15 cmake -GNinja ..
       - name: Build