pin actions

Author: radoering

.github/workflows/deploy-preview.yaml

@@ -55,7 +55,7 @@ jobs:
           poetry run python bin/website build
 
       - name: Start Deployment
-        uses: bobheadxi/deployments@v1
+        uses: bobheadxi/deployments@648679e8e4915b27893bd7dbc35cb504dc915bc8 # v1.5.0
         id: deployment
         with:
           step: start

.github/workflows/deploy-production.yaml

@@ -41,7 +41,7 @@ jobs:
       # removes the vendor directory that is created by "bundle install"
       # https://github.com/fenneclab/hugo-bin/blob/a5500e4f622f46886947d3438243bd97cfe6c04c/lib/install.js#L28-L30
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@eaecf785f6a34567a6d97f686bbb7bccc1ac1e5c # v1.237.0
         with:
           ruby-version: 2.6
           bundler-cache: true