github: Pin external GitHub Actions to hashes (#16)

* github: Pin actions/checkout to 755da8c3cf115ac066823e79a1e1788f8940201b * github: Pin actions/setup-go to 6edd4406fa81c3da01a34fa6f6343087c207a568
hashicorp · Feb 16, 2023 · b3026e5 · b3026e5
1 parent 44eb756
commit b3026e5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -29,13 +29,13 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b # https://github.com/actions/checkout/releases/tag/v3.2.0
       -
         name: Unshallow
         run: git fetch --prune --unshallow
       -
         name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # https://github.com/actions/setup-go/releases/tag/v3.5.0
         with:
           go-version: ${{ matrix.go }}
       -