ci: pin some workflows to SHAs

to let Dependabot keep track of them using SHAs codeql-actions doesn't point to SHAs because it isn't clear whether Dependabot supports their release cycle mentioned at https://github.com/github/codeql-action/issues/307
2021-11-11 10:32:02 +00:00
parent 5570313421
commit 3fec0e6cbf
3 changed files with 3 additions and 3 deletions
@@ -30,6 +30,6 @@ jobs:
    env: ${{ matrix.env }}
    steps:
      - name: Repository checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
      - name: Build check (${{ env.COMPILER }}-${{ env.COMPILER_VERSION }})
        run: sudo -E .github/workflows/build_test.sh