ci: pinact

Author: guitarrapc

.github/workflows/build.yaml

@@ -13,7 +13,7 @@ jobs:
     runs-on: windows-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Install Modules
         shell: pwsh
         run: |
@@ -26,7 +26,7 @@ jobs:
         run: |
           Invoke-ScriptAnalyzer -Path ./src -Settings ./PSScriptAnalyzerSettings.psd1 -Severity Warning
           Invoke-ScriptAnalyzer -Path ./src/ScoopPlaybook.psm1 -Settings CodeFormatting
-      - uses: MinoruSekine/setup-scoop@main # use @main to fix. see https://github.com/MinoruSekine/setup-scoop/issues/7
+      - uses: MinoruSekine/setup-scoop@80f7f261b2e62af5d7450c85317b194046aa91f5 # v4.0.1
       - name: Scoop Version
         run: scoop --version
       - name: List Scoop Buckets

.github/workflows/release.yaml

@@ -13,18 +13,18 @@ jobs:
         shell: bash
         env:
           REF: ${{ github.ref }}
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - run: . ./publish.ps1 -Version $env:GIT_TAG
         shell: pwsh
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: ScoopPlaybook_${{ env.GIT_TAG }}.zip
           path: ./publish/ScoopPlaybook_${{ env.GIT_TAG }}.zip
       - run: ./push.ps1 -Key $env:KEY -DryRun $false
         shell: pwsh
         env:
           KEY: ${{ secrets.SYNCED_PSGALLERY_NUGET_KEY }}
-      - uses: actions/create-release@v1
+      - uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
         id: create_release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}