From 39001e5474949cdec80a1b200d6ec096d36a6854 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Brigitta=20Sip=C5=91cz?= <b.sipocz@gmail.com>
Date: Wed, 5 Jun 2024 23:58:35 -0700
Subject: [PATCH] Using hashes for all actions (#81)

* Use full commit SHAs for all GitHub actions as described in SPEC 8.
---
 .github/workflows/ci.yml            | 6 +++---
 .github/workflows/keep-alive.yml    | 2 +-
 .github/workflows/remove-wheels.yml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3edff93..3e7aecc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,10 +21,10 @@ jobs:
     if: github.repository == 'scientific-python/upload-nightly-action'
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29  # v4.1.6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d  # v5.1.0
         with:
           python-version: '3.x'
 
@@ -97,7 +97,7 @@ jobs:
 
     steps:
       - name: Install micromamba and anaconda-client
-        uses: mamba-org/setup-micromamba@v1
+        uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822  # v1.9.0
         with:
           environment-name: remove-wheels
           create-args: >-
diff --git a/.github/workflows/keep-alive.yml b/.github/workflows/keep-alive.yml
index acf776e..b35bd3a 100644
--- a/.github/workflows/keep-alive.yml
+++ b/.github/workflows/keep-alive.yml
@@ -18,7 +18,7 @@ jobs:
       group: ${{ github.workflow }}-${{ github.ref }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29  # v4.1.6
 
     - name: Create a minimal payload
       run: |
diff --git a/.github/workflows/remove-wheels.yml b/.github/workflows/remove-wheels.yml
index 03e3d7e..8b42cc0 100644
--- a/.github/workflows/remove-wheels.yml
+++ b/.github/workflows/remove-wheels.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Install micromamba and anaconda-client
-        uses: mamba-org/setup-micromamba@v1
+        uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822  # v1.9.0
         with:
           environment-name: remove-wheels
           create-args: >-