Pin GH actions

Author: Seldaek

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels: []

.github/workflows/conductor.yaml

@@ -16,15 +16,14 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: Install PHP
-        uses: "shivammathur/setup-php@v2"
+      - uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # 2.32.0
         with:
           coverage: "none"
           extensions: "intl, zip, apcu"
           php-version: "8.3"
 
       # See the Conductor GitHub Action at https://github.com/packagist/conductor-github-action
       - name: "Running Conductor"
-        uses: packagist/conductor-github-action@v1
+        uses: packagist/conductor-github-action@65ef5931b0a5e78e5830bf568b46e0bdbf93e047 # 1.2.0

.github/workflows/continuous-integration.yml

@@ -15,11 +15,9 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - name: "Checkout"
-        uses: "actions/checkout@v4"
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: "Install PHP"
-        uses: "shivammathur/setup-php@v2"
+      - uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # 2.32.0
         with:
           coverage: "none"
           extensions: "intl, zip, apcu"
@@ -30,13 +28,12 @@ jobs:
       - name: "Start MySQL"
         run: sudo systemctl start mysql.service
 
-      - name: "Install dependencies"
-        uses: "ramsey/composer-install@v3"
+      - uses: ramsey/composer-install@a2636af0004d1c0499ffca16ac0b4cc94df70565 # 3.1.0
         with:
             composer-options: "--ansi --no-interaction --no-progress --prefer-dist"
 
       - name: Start Redis
-        uses: supercharge/[email protected]
+        uses: supercharge/redis-github-action@ea9b21c6ecece47bd99595c532e481390ea0f044 # 1.8.0
         with:
           redis-version: 6
 

.github/workflows/lint.yml

@@ -11,11 +11,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: "Checkout"
-        uses: "actions/checkout@v4"
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: "Install PHP"
-        uses: "shivammathur/setup-php@v2"
+      - uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # 2.32.0
         with:
           coverage: "none"
           extensions: "intl"

.github/workflows/phpstan.yml

@@ -15,11 +15,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: "Checkout"
-        uses: "actions/checkout@v4"
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: "Install PHP"
-        uses: "shivammathur/setup-php@v2"
+      - uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # 2.32.0
         with:
           coverage: "none"
           extensions: "intl, zip, apcu"
@@ -30,8 +28,7 @@ jobs:
       - name: "Start MySQL"
         run: sudo systemctl start mysql.service
 
-      - name: "Install dependencies"
-        uses: "ramsey/composer-install@v3"
+      - uses: ramsey/composer-install@a2636af0004d1c0499ffca16ac0b4cc94df70565 # 3.1.0
         with:
           composer-options: "--ansi --no-interaction --no-progress --prefer-dist"