.github: pin GH Actions to SHA-1 commit

Fixes: https://tracker.ceph.com/issues/73336
Signed-off-by: Ernesto Puerta <epuertat@redhat.com>

diff --git a/.github/workflows/create-backport-trackers.yml b/.github/workflows/create-backport-trackers.yml
index fe05d09b0ec1b87d9c3334826cd77f21d51b446c..65ff2d06dcdc620e6a3f47e998b4bc6bf0c4a284 100644 (file)
--- a/.github/workflows/create-backport-trackers.yml
+++ b/.github/workflows/create-backport-trackers.yml
@@ -39,7 +39,7 @@ jobs:
       - uses: Bhacaz/checkout-files@e3e34e7daef91a5f237485bb88a260aee4be29dd
         with:
           files: src/script/backport-create-issue src/script/requirements.backport-create-issue.txt
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: '>=3.6 <3.12'
           cache: 'pip'

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 510a6bebd4e236c1ec1e64cdace93ca847c30e2a..473adae94ffe60284f17252e8a65028eedc53f7e 100644 (file)
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -9,7 +9,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
         with:
           # PAT for GitHub API authentication
           repo-token: "${{ secrets.GITHUB_TOKEN }}"