[StepSecurity] ci: Harden GitHub Actions (#133)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
haskell-actions · Dec 9, 2023 · 01bbea4 · 01bbea4
1 parent a76b41b
commit 01bbea4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
-      - uses: haskell-actions/setup@v2
+      - uses: haskell-actions/setup@7398b0c373cccf9ed5dfddae26f77ed02dea4967 # v2.5.3
         with:
           enable-stack: true
 

diff --git a/.github/workflows/hlint.yaml b/.github/workflows/hlint.yaml
@@ -18,4 +18,4 @@ jobs:
       security-events: write
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - uses: haskell-actions/hlint-scan@v1
+      - uses: haskell-actions/hlint-scan@a99e50c562954d0c73211df1d7dabd33128b1098 # v1.0.0