Update firebase-hosting-merge.yml (brisbanesocialchess#999)

* Update firebase-hosting-merge.yml

* Update .github/workflows/firebase-hosting-merge.yml

Author: jbampton

.github/workflows/firebase-hosting-merge.yml

@@ -7,13 +7,16 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: read
 jobs:
   build_and_deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: ↩️ Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - run: npm ci && npm run build
-      - uses: FirebaseExtended/action-hosting-deploy@v0
+      - uses: FirebaseExtended/action-hosting-deploy@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c
         with:
           repoToken: ${{ secrets.GITHUB_TOKEN }}
           firebaseServiceAccount: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_BRISBANE_SOCIAL_CHESS }}