From b4ce42d91beba07c4a1d89061d948df46875c175 Mon Sep 17 00:00:00 2001
From: Joshua Fernandes <joshua.fernandes@consensys.net>
Date: Tue, 24 Sep 2024 15:26:03 +1000
Subject: [PATCH] tag to commit hashes for mm

---
 linkcheck/action.yml     | 3 ++-
 lint-markdown/action.yml | 3 ++-
 spelling/action.yml      | 3 ++-
 trivy/action.yml         | 2 +-
 4 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/linkcheck/action.yml b/linkcheck/action.yml
index 5658ad2..aa4b7da 100644
--- a/linkcheck/action.yml
+++ b/linkcheck/action.yml
@@ -34,10 +34,11 @@ runs:
         repository: Consensys/docs-gha
         path: .docs-gha
 
+    # 5c5dfc0ac2e225883c0e5f03a85311ec2830d368 = v1 as at 24092024
     # use-quiet-mode: only show errors in output
     # use-verbose-mode: show detailed HTTP status for checked links
     - name: Test links
-      uses: gaurav-nelson/github-action-markdown-link-check@v1
+      uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368
       with:
         use-quiet-mode: yes
         use-verbose-mode: yes
diff --git a/lint-markdown/action.yml b/lint-markdown/action.yml
index b593121..2e4fe78 100644
--- a/lint-markdown/action.yml
+++ b/lint-markdown/action.yml
@@ -22,7 +22,8 @@ runs:
         repository: Consensys/docs-gha
         path: .docs-gha
 
-    - uses: tj-actions/changed-files@v45
+    # 48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c = v45 as at 24092024
+    - uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c
       id: changed-files
       with:
         files:  ${{ inputs.FILEPATHS }}
diff --git a/spelling/action.yml b/spelling/action.yml
index 3e55d47..e0734d5 100644
--- a/spelling/action.yml
+++ b/spelling/action.yml
@@ -18,8 +18,9 @@ runs:
         repository: Consensys/docs-gha
         path: .docs-gha
 
+    # 38bf078c328061f59879b347ca344a718a736018 = v2 as at 24092024
     - name: Vale
-      uses: errata-ai/vale-action@v2
+      uses: errata-ai/vale-action@38bf078c328061f59879b347ca344a718a736018
       with:
         files: ${{ inputs.FILEPATHS }}
         separator: ","
diff --git a/trivy/action.yml b/trivy/action.yml
index 4fe322c..0bca549 100644
--- a/trivy/action.yml
+++ b/trivy/action.yml
@@ -14,7 +14,7 @@ runs:
 
     # 0.23.0
     - name: Run Trivy vulnerability scanner
-      uses: aquasecurity/trivy-action@7c2007bcb556501da015201bcba5aa14069b74e2       
+      uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8
       with:
         scan-type: 'fs'
         ignore-unfixed: true