Merge pull request #401 from kurtmckee/use-hashes

Use hashes as GitHub action identifiers
kurtmckee · Oct 16, 2023 · 889d045 · 889d045
2 parents 696d5b9 + 39e2b91
commit 889d045
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/.github/workflows/feedparser.yml b/.github/workflows/feedparser.yml
@@ -30,11 +30,11 @@ jobs:
 
     steps:
       - name: "Checkout the repo"
-        uses: "actions/checkout@v3"
+        uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0
 
       - name: "Setup Python"
         id: "setup-python"
-        uses: "actions/setup-python@v4"
+        uses: "actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236" # v4.7.1
         with:
           python-version: |
             3.8
@@ -55,7 +55,7 @@ jobs:
 
       - name: "Restore cache"
         id: "restore-cache"
-        uses: "actions/cache@v3"
+        uses: "actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84" # v3.3.2
         with:
           path: |
             .tox/
@@ -78,11 +78,11 @@ jobs:
 
     steps:
       - name: "Checkout the repo"
-        uses: "actions/checkout@v3"
+        uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0
 
       - name: "Setup Python"
         id: "setup-python"
-        uses: "actions/setup-python@v4"
+        uses: "actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236" # v4.7.1
         with:
           python-version: "3.11"
 
@@ -92,7 +92,7 @@ jobs:
 
       - name: "Restore cache"
         id: "restore-cache"
-        uses: "actions/cache@v3"
+        uses: "actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84" # v3.3.2
         with:
           path: |
             .mypy_cache/