Hash-pin workflow Actions

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 1ae78d412073f793cc8584df96977c5d6de2899e..233036851f8580435898a9a59528e4f76c4ded17 100644 (file)
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -17,6 +17,6 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Codespell
-        uses: codespell-project/actions-codespell@v1
+        uses: codespell-project/actions-codespell@94259cd8be02ad2903ba34a22d9c13de21a74461 # v2.0

diff --git a/.github/workflows/pr-ci.yml b/.github/workflows/pr-ci.yml
index ef1da4c1da3151207c7b1c9eb7b6e5b6e9e77268..faacc837971a8e6d0f212d646cddc1eb107ae22f 100644 (file)
--- a/.github/workflows/pr-ci.yml
+++ b/.github/workflows/pr-ci.yml
@@ -24,7 +24,7 @@ jobs:
       - name: Install dependencies (Ubuntu)
         if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y clang doxygen gcc gcc-10 gcc-9 libstdc++-10-dev libstdc++-9-dev ninja-build python3-pip python3-setuptools valgrind
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - run: test/ci-install.sh
       - run: test/ci-build.sh