Merge pull request #819 from adamralph/pin-actions

pin actions

Author: adamralph

.github/workflows/ci.yml

@@ -23,17 +23,17 @@ jobs:
     name: ${{ matrix.job.name }}
     runs-on: ${{ matrix.job.os }}
     steps:
-      - uses: actions/setup-dotnet@v5.1.0
+      - uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
         with:
           dotnet-version: 10.0.102
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           filter: tree:0
           persist-credentials: false
       - run: ./build
       - if: matrix.job.name == 'ubuntu'
-        uses: actions/upload-artifact@v6.0.0
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: NuGet packages
           path: ./artifacts/*.nupkg

.github/workflows/infer-sharp.yml

@@ -9,10 +9,10 @@ jobs:
   infer-sharp:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-dotnet@v5.1.0
+      - uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
         with:
           dotnet-version: '10.0.102'
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - run: dotnet build
@@ -22,10 +22,10 @@ jobs:
         with:
           binary-path: './SimpleExec'
       - run: cat infer-out/report.txt
-      - uses: actions/upload-artifact@v6.0.0
+      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: InferSharp reports
           path: infer-out/report.*
-      - uses: github/codeql-action/upload-sarif@v3.23.0
+      - uses: github/codeql-action/upload-sarif@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0
         with:
           sarif_file: infer-out/report.sarif

.github/workflows/lint.yml

@@ -12,7 +12,7 @@ jobs:
       packages: read
       statuses: write
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           filter: tree:0

.github/workflows/release.yml

@@ -12,10 +12,10 @@ jobs:
   release:
     runs-on: ubuntu-24.04-arm
     steps:
-      - uses: actions/setup-dotnet@v5.1.0
+      - uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
         with:
           dotnet-version: 10.0.102
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - run: ./build pack

.github/workflows/spell-check.yml

@@ -8,7 +8,7 @@ jobs:
   spell-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - run: npx cspell@5.2.1 "**/*"