Merge pull request #19 from openfga/chore/pin-sha-for-actions

ci: pin action versions by sha

.github/workflows/test.yml

@@ -51,9 +51,9 @@ jobs:
       OPENFGA_DATASTORE_URI: 'postgres://openfga:[email protected]:5432/openfga'
       OPENFGA_LOG_LEVEL: debug
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Install OpenFGA server ${{ matrix.test.openfga_tag }}
-        uses: jaxxstorm/[email protected]
+        uses: jaxxstorm/action-install-gh-release@7f2440a9a41f74262d8f6433da138c799799a969 # v1.13.0
         with:
           repo: openfga/openfga
           tag: ${{ matrix.test.openfga_tag }}
@@ -65,12 +65,12 @@ jobs:
         shell: bash
         run: openfga run &
       - name: Install OpenFGA cli
-        uses: jaxxstorm/[email protected]
+        uses: jaxxstorm/action-install-gh-release@7f2440a9a41f74262d8f6433da138c799799a969 # v1.13.0
         with:
           repo: openfga/cli
           cache: enable
       - name: Install jq
-        uses: dcarbone/install-jq-action@v2
+        uses: dcarbone/install-jq-action@e397bd87438d72198f81efd21f876461183d383a # v3.0.1
       - name: Create store with model
         id: 'store'
         run: |

action.yml

@@ -31,11 +31,11 @@ runs:
   using: composite
   steps:
     - name: Install OpenFGA CLI
-      uses: jaxxstorm/[email protected]
+      uses: jaxxstorm/action-install-gh-release@7f2440a9a41f74262d8f6433da138c799799a969 # v1.13.0
       with:
         repo: openfga/cli
         cache: enable
-    - uses: chrisdickinson/[email protected].1
+    - uses: chrisdickinson/setup-yq@3d931309f27270ebbafd53f2daee773a82ea1822 # v1.0.0
       with:
         yq-version: v4.25.3
     - name: Run OpenFGA CLI