gh/workflows: pin action dependencies

...to improve OpenSSF score. https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies Signed-off-by: U. Artie Eoff <[email protected]>
uartie · Sep 4, 2024 · 3d5d8ba · 3d5d8ba
1 parent 2a466e6
commit 3d5d8ba
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
@@ -16,11 +16,11 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         lfs: 'true'
     - name: Setup python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install dependencies