From fba38eb5aefd0f7b34f7628737013685d6c6169e Mon Sep 17 00:00:00 2001
From: mahula <lenzmath@posteo.de>
Date: Sun, 4 Aug 2024 20:41:51 +0200
Subject: [PATCH] pin all github actions by commit hash

---
 .github/workflows/lint_pr.yml         | 2 +-
 .github/workflows/test-build.yml      | 4 ++--
 .github/workflows/test-lint.yml       | 4 ++--
 .github/workflows/vuepress-deploy.yml | 6 +++---
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/lint_pr.yml b/.github/workflows/lint_pr.yml
index a6af7353..ffaba666 100644
--- a/.github/workflows/lint_pr.yml
+++ b/.github/workflows/lint_pr.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@80c0371c57c5142ed6c844270bba1864bac8a4c6 # v5.5.3 # v5.5.3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml
index 4f6c9b69..8d5c6c57 100644
--- a/.github/workflows/test-build.yml
+++ b/.github/workflows/test-build.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08 # v4.1.7
 
       - name: Setup Node 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@26961cf329f22f6837d5f54c3efd76b480300ace # v4.0.3
         with:
           node-version: '20'
 
diff --git a/.github/workflows/test-lint.yml b/.github/workflows/test-lint.yml
index 0f012cca..a314c788 100644
--- a/.github/workflows/test-lint.yml
+++ b/.github/workflows/test-lint.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08 # v4.1.7
 
       - name: Setup Node 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@26961cf329f22f6837d5f54c3efd76b480300ace # v4.0.3
         with:
           node-version: '20'
 
diff --git a/.github/workflows/vuepress-deploy.yml b/.github/workflows/vuepress-deploy.yml
index ef1f5d08..72d633a4 100644
--- a/.github/workflows/vuepress-deploy.yml
+++ b/.github/workflows/vuepress-deploy.yml
@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@master
+      uses: actions/checkoutactions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08 # v4.1.7
 
     - name: Setup Node 20
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@26961cf329f22f6837d5f54c3efd76b480300ace # v4.0.3
       with:
         node-version: 20
 
@@ -23,7 +23,7 @@ jobs:
       #   VUEPRESS_BASE: '/ocelot.social/'
 
     - name: Deploy Vuepress to Github Pages
-      uses: crazy-max/ghaction-github-pages@v4
+      uses: crazy-max/ghaction-github-pages@cda5497acf90563d34489ed832a67c2c50353a16 # v4.0.0
       with:
         target_branch: gh-pages
         build_dir: docs/.vuepress/dist