Merge pull request #985 from rpkelly/update_actions

github: lock actions by commit

Author: Matthew Yeazel

.github/workflows/build.yaml

@@ -19,7 +19,7 @@ jobs:
       group: bottlerocket
       labels: bottlerocket_ubuntu-latest_8-core
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - run: make sdk-build
         # If we forget to add yamlgen changes to our commits, this will fail.
       - name: ensure that git is clean

.github/workflows/licenses.yaml

@@ -20,5 +20,5 @@ jobs:
     # If we already checked the PR, we don't need to check the actual push
     if: ${{ github.event_name == 'pull_request' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - run: make cargo-deny

.github/workflows/lint.yaml

@@ -15,5 +15,5 @@ jobs:
   checklint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - run: make mdlint

.github/workflows/tools.yaml

@@ -19,7 +19,7 @@ jobs:
       group: bottlerocket
       labels: bottlerocket_ubuntu-latest_16-core
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       # Build local tools container in case we are working on a new tools release
       - run: make tools
       - run: make images