ci: update actions to latest versions; use shas to pin versions

Closes gh-55
jquery · Jul 5, 2024 · 39330d6 · 39330d6
1 parent 0dd9c3d
commit 39330d6
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/CI.yaml b/.github/workflows/CI.yaml
@@ -10,7 +10,7 @@ jobs:
     # Includes Ruby 2.7 and RubyGems 3.1
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Install puppet-lint
         run: |

diff --git a/.github/workflows/smoke.yaml b/.github/workflows/smoke.yaml
@@ -13,5 +13,5 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - run: make test