[StepSecurity] ci: Harden GitHub Actions

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
northwood-labs · Feb 2, 2024 · fd881e3 · fd881e3
1 parent c86765f
commit fd881e3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -166,7 +166,7 @@ jobs:
           cache: true
 
       - name: Install OpenTofu ${{ matrix.opentofu_version }}
-        uses: opentofu/setup-opentofu@v1
+        uses: opentofu/setup-opentofu@da3271e0a2f8b8552a91e37cf85d03622c328ab7 # v1.0.2
         with:
           tofu_version: ~${{ matrix.opentofu_version }}
           tofu_wrapper: false