chore(deps): pin dependencies

globis-org · Jan 22, 2024 · 7b9dc65 · 7b9dc65
1 parent 9379c60
commit 7b9dc65
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/secrets-scan.yaml b/.github/workflows/secrets-scan.yaml
@@ -9,12 +9,12 @@ jobs:
     if: ${{ !contains(github.actor, '[bot]') }} # [bot]を含む場合は除外する
     steps:
     - name: Checkout
-      uses: actions/[email protected]
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       with:
         ref: ${{ github.head_ref }}
 
     - name: Run Aqua Security Trivy
-      uses: aquasecurity/trivy-action@0.15.0
+      uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca # 0.16.1
       with:
         scan-type: fs
         scan-ref: . # default