Merge pull request #50 from github/pin-action-version

Author: peckjon

content/what-the-hack/Coach/create-azure-resources.yml

@@ -1,12 +1,15 @@
 on: [workflow_dispatch]
 name: Create Azure resources
+permissions:
+  contents: read
+  id-token: write
 jobs:
   build-and-deploy:
     runs-on: ubuntu-latest
     steps:
 
       # Checkout code
-    - uses: actions/checkout@main
+    - uses: actions/checkout@v4
 
       # Log into Azure
     - uses: azure/login@v1

content/what-the-hack/Coach/deploy.yml

@@ -4,12 +4,16 @@ on:
       - main
 name: Deploy to Azure
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Log in to Azure
         uses: azure/login@v1