chore(deps): pin dependencies

ahochsteger · Dec 26, 2024 · 5dff5be · 5dff5be
1 parent a9c78b7
commit 5dff5be
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -75,7 +75,7 @@ jobs:
       - name: Release Please
         if: ${{ !github.event.inputs.skip_release }}
         id: release
-        uses: googleapis/release-please-action@v4
+        uses: googleapis/release-please-action@7987652d64b4581673a76e33ad5e98e3dd56832f # v4
         with:
           release-type: node # Or the appropriate release type for your project
       - id: coveralls
@@ -85,7 +85,7 @@ jobs:
       - id: sonarcloud
         if: ${{ !github.event.inputs.skip_sonarcloud }}
         name: SonarCloud Scan
-        uses: SonarSource/sonarqube-scan-action@v4
+        uses: SonarSource/sonarqube-scan-action@bfd4e558cda28cda6b5defafb9232d191be8c203 # v4
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}