Merge pull request #47 from mackerelio/workflow-sha-pinning

Workflow SHA pinning

Author: yseto

.github/workflows/ci.yml

@@ -9,10 +9,10 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: ['ubuntu-20.04', 'ubuntu-22.04']
+        os: ['ubuntu-22.04', 'ubuntu-24.04']
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - run: ansible --version
     - run: ansible-playbook --syntax-check ./tests/test.yml -i ./tests/hosts
     - run: ./tests/run

.github/workflows/release.yml

@@ -7,7 +7,7 @@ jobs:
   release:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: ansible-galaxy role import
         run: |
           ansible-galaxy role import --token "$ANSIBLE_TOKEN" --role-name mackerel-agent mackerelio ansible-mackerel-agent