Update test-action.yml

Make sure that all actions are using commit hashes. Signed-off-by: Jauder Ho <jauderho@users.noreply.github.com>
sigstore · Feb 6, 2022 · 1c514f2 · 1c514f2
1 parent 504d341
commit 1c514f2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml
@@ -261,8 +261,8 @@ jobs:
       statuses: none
     name: Try to install cosign with go
     steps:
-    - uses: actions/checkout@v2
-    - uses: actions/setup-go@v2
+    - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2
+    - uses: actions/setup-go@424fc82d43fa5a37540bae62709ddcc23d9520d4 # v2
       with:
         go-version: '1.17.x'
     - name: Install Cosign