ci: use NixOS/nix-installer-action

Author: mhanberg

.github/workflows/add-versions.yml

@@ -19,9 +19,8 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v5
-
-      - uses: cachix/install-nix-action@v31
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: NixOS/nix-installer-action@main
 
       - name: Configure git
         run: |
@@ -65,7 +64,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           branch: ${{ steps.metadata.outputs.branch }}
           title: ${{ steps.metadata.outputs.title }}

.github/workflows/cache.yml

@@ -17,8 +17,8 @@ jobs:
     outputs:
       calculated: ${{ steps.set-matrix.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v5
-      - uses: cachix/install-nix-action@v31
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: NixOS/nix-installer-action@main
       - name: Set Matrix
         id: set-matrix
         run: |
@@ -32,15 +32,15 @@ jobs:
     strategy:
       matrix: ${{ fromJSON(needs.matrix.outputs.calculated) }}
     steps:
-      - uses: actions/checkout@v5
-      - uses: cachix/install-nix-action@v31
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
         with:
           extra_nix_config: |
             extra-substituters = https://nix-beam-flakes.cachix.org
             extra-trusted-public-keys = nix-beam-flakes.cachix.org-1:iRMzLmb/dZFw7v08Rp3waYlWqYZ8nR3fmtFwq2prdk4=
             accept-flake-config = true
 
-      - uses: cachix/cachix-action@v16
+      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
         if: github.ref == 'refs/heads/main'
         with:
           name: nix-beam-flakes

.github/workflows/test.yml

@@ -14,13 +14,10 @@ jobs:
     name: Flake Checks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v9
-        with:
-          diagnostic-endpoint: ""
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: NixOS/nix-installer-action@main
       - name: Enable Nix Store Caching
-        uses: DeterminateSystems/magic-nix-cache-action@v3
+        uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v14
         with:
           diagnostic-endpoint: ""
       - run: nix -L flake check --all-systems
@@ -33,15 +30,12 @@ jobs:
         os: [macos-latest, ubuntu-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
-      - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v9
-        with:
-          diagnostic-endpoint: ""
-      - uses: DeterminateSystems/magic-nix-cache-action@v3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: NixOS/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v14
         with:
           diagnostic-endpoint: ""
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
         if: github.ref == 'refs/heads/main'
         with:
           name: nix-beam-flakes