Pin actions/checkout Dependency to Specific Commit Hash

It's a bit silly, because if we can't trust GitHub, what are we doing here? But OSSF complains about it, so let's fix it.
2022-12-20 14:53:12 -05:00
parent ea199876e2
commit e3f2c8b11c
4 changed files with 55 additions and 55 deletions
@@ -19,7 +19,7 @@ jobs:

    steps:
      - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b # tag=v3

      - name: Archive
        env: