[StepSecurity] ci: Harden GitHub Actions

Signed-off-by: StepSecurity Bot <[email protected]>
trilinos · Apr 16, 2024 · abf8630 · abf8630
1 parent 23ccc58
commit abf8630
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/spack.yml b/.github/workflows/spack.yml
@@ -20,11 +20,11 @@ jobs:
     runs-on: [self-hosted, gcc-10.3.0_openmpi-4.1.6]
     steps:
       - name: Cancel Previous Runs
-        uses: styfle/[email protected]
+        uses: styfle/cancel-workflow-action@b173b6ec0100793626c2d9e6b90435061f4fc3e5 # 0.11.0
         with:
           access_token: ${{ github.token }}
       - name: Clone Trilinos
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 1
       - name: Spack build