Pin GitHub Actions to commit (#156)

* update github actions to commits

* Disable min-spaces-from-content yamllint rule

---------

Co-authored-by: Adam Becevello <adam.becevello@shopify.com>

Author: rxbchen

.github/workflows/analysis.yml

@@ -17,11 +17,11 @@ jobs:
     steps:
       -
         name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       -
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@e34163cd15f4bb403dcd72d98e295997e6a55798 # v1.238.0
         with:
           bundler-cache: true
       -
@@ -35,7 +35,7 @@ jobs:
           severity: error
       -
         name: yaml-lint
-        uses: ibiqlik/action-yamllint@v3
+        uses: ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c # v3.1.1
         with:
           config_file: .yamllint.yml
 
@@ -49,14 +49,14 @@ jobs:
     steps:
       -
         name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       -
         name: initialize
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           languages: ruby
       -
         name: codeql analyze
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17

.github/workflows/pre_release.yml

@@ -20,7 +20,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 

.github/workflows/test.yml

@@ -16,8 +16,8 @@ jobs:
         ruby: [ "3.0", "3.1", "3.2", "3.3" ]
     name: Ruby ${{ matrix.ruby }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: ruby/setup-ruby@e34163cd15f4bb403dcd72d98e295997e6a55798 # v1.238.0
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true

.yamllint.yml

@@ -11,6 +11,7 @@ ignore: |
 rules:
   comments:
     require-starting-space: true
+    min-spaces-from-content: 1
   comments-indentation: enable
   document-start:
     present: true