chore: pin workflow actions (#111)

Signed-off-by: Christopher Phillips <[email protected]>
anchore · Sep 18, 2023 · f373257 · f373257
1 parent c12c277
commit f373257
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/.github/workflows/update-sboms.yaml b/.github/workflows/update-sboms.yaml
@@ -18,10 +18,10 @@ jobs:
       contents: read
       packages: write
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
 
     - name: Setup Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 #v4.7.0
       with:
         python-version: ${{ env.PYTHON_VERSION }}
 

diff --git a/.github/workflows/validations.yaml b/.github/workflows/validations.yaml
@@ -14,14 +14,14 @@ jobs:
     name: "Checks"
     runs-on: ubuntu-22.04-4core-16gb
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
 
     - name: Setup Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 #v4.7.0
       with:
         python-version: ${{ env.PYTHON_VERSION }}
 
-    - uses: actions/cache@v2
+    - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 #v3.3.2
       with:
         path: venv
         key: ${{ hashFiles('requirements.txt') }}-${{ hashFiles('Makefile') }}