Merge pull request #10 from sfblackl-intel/dependabot/github_actions/…

…actions/checkout-4.1.5

Bump actions/checkout from 3.1.0 to 4.1.5

.github/workflows/email-check.yaml

@@ -16,7 +16,7 @@ jobs:
     if: github.repository == 'llvm/llvm-project'
     steps:
       - name: Fetch LLVM sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 

.github/workflows/pr-code-format.yml

@@ -13,7 +13,7 @@ jobs:
     if: (github.repository == 'llvm/llvm-project' || github.repository == 'intel/llvm') && !contains(github.event.pull_request.labels.*.name, 'disable-lint')
     steps:
       - name: Fetch LLVM sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -35,7 +35,7 @@ jobs:
       # PR for security reasons as we're using pull_request_target. Checkout
       # the target branch with the necessary files.
       - name: Fetch code formatting utils
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.5
         with:
           sparse-checkout: |
             llvm/utils/git/requirements_formatting.txt

.github/workflows/scorecard.yml

@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           persist-credentials: false