pinact run で sha pinning

Author: kga

.github/workflows/account.yml

@@ -22,13 +22,13 @@ jobs:
           TZ: UTC
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
       with:
         go-version: ^1.24
       id: go
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v4
-    - uses: golangci/golangci-lint-action@v7
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+    - uses: golangci/golangci-lint-action@9fae48acfc02a90574d7c304a1758ef9895495fa # v7.0.1
       with:
         working-directory: services/account
     - name: Get dependencies

.github/workflows/blog.yml

@@ -22,13 +22,13 @@ jobs:
           TZ: UTC
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
       with:
         go-version: ^1.24
       id: go
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v4
-    - uses: golangci/golangci-lint-action@v7
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+    - uses: golangci/golangci-lint-action@9fae48acfc02a90574d7c304a1758ef9895495fa # v7.0.1
       with:
         working-directory: services/blog
     - name: Get dependencies

.github/workflows/renderer-go.yml

@@ -12,13 +12,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
       with:
         go-version: ^1.24
       id: go
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v4
-    - uses: golangci/golangci-lint-action@v7
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+    - uses: golangci/golangci-lint-action@9fae48acfc02a90574d7c304a1758ef9895495fa # v7.0.1
       with:
         working-directory: services/renderer-go
     - name: Get dependencies

.github/workflows/renderer-ts.yml

@@ -15,9 +15,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
           cache: yarn

.github/workflows/update-pb.yml

@@ -8,11 +8,11 @@ jobs:
   update:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
       - run: |
           scripts/compile
         working-directory: pb/
-      - uses: peter-evans/create-pull-request@v6
+      - uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
         with:
           branch: update-pb
           commit-message: generate gRPC code from commit ${{ github.sha }}