Merge pull request #322 from akirak/fix-zizmor-warnings

Fix security warnings on the CI workflows

Author: akirak

.github/actions/setup-nix/action.yml

@@ -14,13 +14,13 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: cachix/install-nix-action@v31
+    - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
       with:
         github_access_token: ${{ inputs.github-token }}
         extra_nix_config:
           flake-registry =  https://raw.githubusercontent.com/akirak/flake-pins/master/registry.json
 
-    - uses: cachix/cachix-action@v17
+    - uses: cachix/cachix-action@02b16339eddcf6ea27126a830c7f1992855cae13 # v17
       with:
         name: akirak
         authToken: '${{ inputs.cachix-token }}'

.github/workflows/update-elixir.yml

@@ -1,3 +1,4 @@
+## SPDX-License-Identifier: MIT
 name: "Update the Erlang and Elixir versions"
 
 on:
@@ -63,6 +64,8 @@ jobs:
         with:
           app-id: ${{ secrets.CREATE_PR_APP_ID }}
           private-key: ${{ secrets.CREATE_PR_APP_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
 
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with: