[StepSecurity] ci: Harden GitHub Actions (#401)

Signed-off-by: StepSecurity Bot <[email protected]>
apache · Jun 24, 2023 · 9341624 · 9341624
1 parent 9e59bd6
commit 9341624
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
@@ -40,7 +40,7 @@ jobs:
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout@v3.5.3   # 3.1.0
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           persist-credentials: false