pin actions

Author: timkpaine

.github/workflows/build.yaml

@@ -31,28 +31,28 @@ jobs:
           cibuildwheel:
             - "cp311"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           submodules: 'true'
 
       - name: Setup cache (mac/linux)
-        uses: actions/cache@v5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: "/home/runner/work/verible-python/verible-python/.ccache"
           key: cache-${{ runner.os }}-
           restore-keys: cache-${{ runner.os }}-
         if: ${{ runner.os != 'Windows' }}
 
       - name: Setup cache (windows)
-        uses: actions/cache@v5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: "C:/ProgramData/chocolatey/"
           key: cache-${{ runner.os }}-
           restore-keys: cache-${{ runner.os }}-
         if: ${{ runner.os == 'Windows' }}
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'
@@ -84,7 +84,7 @@ jobs:
         if: ${{ matrix.os == 'windows-2022' }}
 
       - name: Upload Wheel
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: dist-${{ runner.os }}-${{ runner.arch }}-${{ matrix.python-version }}
           path: dist/*.whl