Merge pull request #221 from developmentseed/fix/pin-github-actions

ci: pin GitHub Actions to SHA digests (fix zizmor unpinned-uses)

Author: vincentsarago

.github/workflows/deploy_mkdocs.yml

@@ -22,10 +22,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout main
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Checkout eoapi-k8s docs
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: developmentseed/eoapi-k8s
           path: eoapi-k8s-temp
@@ -70,7 +70,7 @@ jobs:
           rm -rf eoapi-k8s-temp
 
       - name: Set up Python 3.8
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: 3.8