From 4a24bd180504158a9eb192f425a576f14cdd6720 Mon Sep 17 00:00:00 2001
From: azer <azer.wang@front.com>
Date: Mon, 16 Jun 2025 07:16:21 -0700
Subject: [PATCH] pin all nonlocal actions

---
 .github/workflows/build-and-publish-npm.yml  | 2 +-
 .github/workflows/continuous-integration.yml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build-and-publish-npm.yml b/.github/workflows/build-and-publish-npm.yml
index 763ee7a..5867be0 100644
--- a/.github/workflows/build-and-publish-npm.yml
+++ b/.github/workflows/build-and-publish-npm.yml
@@ -7,7 +7,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Cache and Install npm
         uses: ./.github/actions/cache-and-install-npm
       - name: Build Package
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 1e2eb29..fd3766a 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: ./.github/actions/cache-and-install-npm
       - name: Package JSON
         run: npm run sort-package-json:check
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: ./.github/actions/cache-and-install-npm
       - name: Prettier
         run: npm run prettier:check
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: ./.github/actions/cache-and-install-npm
       - name: Lint
         run: npm run lint
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: ./.github/actions/cache-and-install-npm
       - name: Unused Exports
         run: npm run unused-exports