Pin GH Action versions to specific commits

Author: Ickerday

.github/workflows/release.yml

@@ -9,27 +9,26 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
         with:
           python-version: 3.9
       - name: Install dependencies
         run: pip install .
       - name: Build package
-        # [TODO] We need to confirm this produces the same exact result as `python setup.py sdist`
         run: python -m build
       - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.12.4
+        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc
         with:
           user: __token__
           password: ${{ secrets.PYPI_PASSWORD }}
       - name: Generate API docs
         run: |
           rm -rf ./docs/_build
-          ./venv/bin/python -m tox -e docs
+          python -m tox -e docs
       - name: Upload docs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         with:
           name: python_sdk_docs
           path: docs/_build/html

.github/workflows/test.yml

@@ -15,13 +15,13 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Set up environment variables
         run: cp ./.env.template ./.env
       - name: Run docker-compose with Splunk ${{ matrix.splunk-version }}
         run: SPLUNK_VERSION=${{ matrix.splunk-version }} docker compose up -d
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install Python dependencies to venv