Merge pull request #305 from hashicorp/tsccr-auto-pinning/trusted/202…

…3-04-27 SEC-090: Automated trusted workflow pinning (2023-04-27)
hashicorp · Apr 27, 2023 · 786f41c · 786f41c
2 parents ca2e337 + 40dd6e8
commit 786f41c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
@@ -9,6 +9,6 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       - name: "Check workflow files"
         uses: docker:https://docker.mirror.hashicorp.services/rhysd/actionlint:latest
diff --git a/.github/workflows/infrastructure-tests.yml b/.github/workflows/infrastructure-tests.yml
@@ -10,7 +10,7 @@ jobs:
     container:
       image: docker.mirror.hashicorp.services/hashicorp/terraform:light
     steps:
-      - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       - name: Terraform Validate
         run: |-
           terraform init