tools: pin actions by hash for tools.yml

Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com>
nodejs · Mar 27, 2023 · 9105f37 · 9105f37
1 parent 43c9e48
commit 9105f37
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/tools.yml b/.github/workflows/tools.yml
@@ -163,7 +163,7 @@ jobs:
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
         with:
           persist-credentials: false
       - run: ${{ matrix.run }}