From 0fc74cecca01d5512a47af660bbacc22e8b402a3 Mon Sep 17 00:00:00 2001
From: Julien Doutre <36448022+juliendoutre@users.noreply.github.com>
Date: Mon, 16 Mar 2026 14:11:04 +0100
Subject: [PATCH] Pin GitHub Actions

---
 .github/workflows/pr.yaml     | 2 +-
 .github/workflows/release.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 041f765..2a22c96 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -14,7 +14,7 @@ jobs:
   build:
     runs-on: ubuntu-latest-dd
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
       - run: . $HOME/.cargo/env && rustup update
       - run: . $HOME/.cargo/env && cargo build --release --all
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fb389c4..d9db1f3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest-dd
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
       - run: . $HOME/.cargo/env && rustup update
       - run: . $HOME/.cargo/env && cargo install cargo-workspaces