Pin ruby/setup-ruby to the v1.299.0 sha (#143)

* Pin ruby/setup-ruby to the v1.299.0 sha

* Add workflow shas trufflehog exclusion rule

Author: JoelLefkowitz

.trufflehog3.yml

@@ -3,6 +3,9 @@ exclude:
   - message: Shield links
     pattern: img\.shields\.io
 
+  - message: Workflow action SHAs
+    pattern: uses:\s.+@.+
+
   - message: Dependencies
     paths:
       - node_modules

action.yml

@@ -53,7 +53,7 @@ runs:
   using: "composite"
   steps:
     - name: Set the ruby version
-      uses: ruby/setup-ruby@v1
+      uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64
       with:
         ruby-version: 3.2
         bundler-cache: true