From 379ee39c10cc385241d84591b1d01da3a209dbe2 Mon Sep 17 00:00:00 2001
From: Jacob Oaks <jacoboaks.8@gmail.com>
Date: Tue, 12 Dec 2023 16:20:21 -0500
Subject: [PATCH] Reference fossa workflow actions by SHA (#148)

This references fossa workflow actions by SHA, which #141 missed.
---
 .github/workflows/fossa.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
index 01f3c67..d16cbd6 100644
--- a/.github/workflows/fossa.yaml
+++ b/.github/workflows/fossa.yaml
@@ -11,10 +11,10 @@ jobs:
     if: github.repository_owner == 'uber-go'
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # v4.0.0
 
       - name: FOSSA analysis
-        uses: fossas/fossa-action@v1
+        uses: fossas/fossa-action@f61a4c0c263690f2ddb54b9822a719c25a7b608f # v1.0.0
         with:
           api-key: ${{ secrets.FOSSA_API_KEY }}