Merge pull request #41 from step-security-bot/stepsecurity_remediatio…

…n_1717512592 [StepSecurity] ci: Harden GitHub Actions
jasonkarns · Jun 4, 2024 · 2737aec · 2737aec
2 parents 69594c9 + 8cb7194
commit 2737aec
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -22,9 +22,9 @@ jobs:
     if: github.ref_name != github.event.repository.default_branch
     permissions: {statuses: write}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with: { fetch-depth: 0 } # super-linter needs full git history
-      - uses: github/super-linter/slim@v6
+      - uses: github/super-linter/slim@4e51915f4a812abf59fed160bb14595c0a38a9e7 # v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           BASH_EXEC_IGNORE_LIBRARIES: true