Merge Pull Request #12923 from step-security-bot/Trilinos/stepsecurit…

…y_remediation_1713235360 Automatically Merged using Trilinos Pull Request AutoTester PR Title: b'[StepSecurity] ci: Harden GitHub Actions' PR Author: step-security-bot
trilinos · Apr 16, 2024 · 2c0495a · 2c0495a
2 parents 5ffc309 + abf8630
commit 2c0495a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/spack.yml b/.github/workflows/spack.yml
@@ -20,11 +20,11 @@ jobs:
     runs-on: [self-hosted, gcc-10.3.0_openmpi-4.1.6]
     steps:
       - name: Cancel Previous Runs
-        uses: styfle/[email protected]
+        uses: styfle/cancel-workflow-action@b173b6ec0100793626c2d9e6b90435061f4fc3e5 # 0.11.0
         with:
           access_token: ${{ github.token }}
       - name: Clone Trilinos
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 1
       - name: Spack build