.github: pin GH Actions to SHA-1 commit

Fixes: https://tracker.ceph.com/issues/73307
Signed-off-by: Ernesto Puerta <epuertat@redhat.com>

diff --git a/.github/workflows/qa-symlink.yml b/.github/workflows/qa-symlink.yml
index d67235a7f5a03254460e8f414913ca4bced896ad..36c4274344659d654397a210e7c2d379bcf84a3a 100644 (file)
--- a/.github/workflows/qa-symlink.yml
+++ b/.github/workflows/qa-symlink.yml
@@ -14,12 +14,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout PR HEAD
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         with:
           path: head
 
       - name: checkout base
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         with:
           path: base
           ref: ${{ github.base_ref }}