From 65955eda5550dd3d98f779c2f5d27b54129e47a3 Mon Sep 17 00:00:00 2001
From: "bootc-bot[bot]" <225049296+bootc-bot[bot]@users.noreply.github.com>
Date: Tue, 2 Sep 2025 22:07:36 +0000
Subject: [PATCH] chore(deps): pin dependencies

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
---
 .github/workflows/ci.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index e6db5fc..29bf54e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -20,19 +20,19 @@ jobs:
   build-test:
     name: Build+Test
     runs-on: ubuntu-latest
-    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel@sha256:393c63c7c3a1b06d31c6fa0a4f7912546f962ca24051f8aadd7e8f2106d557b8
     strategy:
       fail-fast: false
       matrix:
         os: [ubuntu-latest]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 20
       - name: Cache Dependencies
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2
       - name: cargo fmt (check)
         run: cargo fmt -- --check -l
       - name: Compile (no features)
@@ -44,7 +44,7 @@ jobs:
       - name: cargo clippy (non-gating)
         run: cargo clippy
       - name: Checkout ostree-rs-ext
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: ostreedev/ostree-rs-ext
           path: ostree-rs-ext