Re-order conditions

Makes for a neater diff.

Author: martincostello

actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql

@@ -40,8 +40,8 @@ where
   ) and
   uses.getVersion() = version and
   not isTrustedOwner(nwo) and
-  not isImmutableAction(uses, nwo) and
   not if isContainerImage(nwo) then isPinnedContainer(version) else isPinnedCommit(version)
+  not isImmutableAction(uses, nwo) and
 select uses.getCalleeNode(),
   "Unpinned 3rd party Action '" + name + "' step $@ uses '" + nwo + "' with ref '" + version +
     "', not a pinned commit hash", uses, uses.toString()