ci(build): Pin GitHub Actions version by commit-hash

powerapi-ng · Feb 5, 2024 · 956a7b8 · 956a7b8
1 parent ce7757e
commit 956a7b8
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: ["master"]
 
+permissions:
+  contents: read
+
 jobs:
   build-and-test:
     name: Build project and run tests
@@ -15,10 +18,10 @@ jobs:
         python-version: ["3.8", "3.x"]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
       with:
         python-version: ${{ matrix.python-version }}