Merge pull request #8 from openeverest/fix-workflow-hashes

Update workflow hashes

Author: spron-in

.github/workflows/build-index.yaml

@@ -24,7 +24,7 @@ jobs:
     name: Regenerate index/index.json
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           # Need full history so build-index.sh can read the latest commit
           # timestamp via `git log`.
@@ -44,7 +44,7 @@ jobs:
         run: bash .github/scripts/build-index.sh
 
       - name: Commit if changed
-        uses: stefanzweifel/git-auto-commit-action@v5
+        uses: stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 # v5.2.0
         with:
           file_pattern: index/index.json
           commit_message: |

.github/workflows/validate.yaml

@@ -16,7 +16,7 @@ jobs:
     name: Schema + lint + index dry-run
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install yq
         run: |