Merge pull request #33 from BoatraceOpenAPI/ci/pin-specific-commit

ci: pin actions/checkout and shivammathur/setup-php action to specific commit

Author: shimomo

.github/workflows/cron.yml

@@ -15,12 +15,12 @@ jobs:
 
     steps:
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4
         with:
           php-version: '8.4'
 
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
       - name: Install base dependencies (without scraper)
         run: |

.github/workflows/psalm.yml

@@ -22,13 +22,13 @@ jobs:
           - '8.4'
     steps:
       - name: Setup PHP ${{ matrix.php-version }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4
         with:
           php-version: ${{ matrix.php-version }}
           extensions: mbstring, xml
 
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
       - name: Install Dependencies
         run: composer install --prefer-dist --no-interaction --no-progress --dev