ci: Pin dependencies (#174)

Author: theofidry

.github/workflows/phpstan.yml

@@ -20,16 +20,16 @@ jobs:
                     - "8.3"
         steps:
             -   name: "Check out repository code"
-                uses: "actions/checkout@v3"
+                uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744" # v3.6.0
 
             -   name: "Setup PHP"
-                uses: "shivammathur/setup-php@v2"
+                uses: "shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1" # v2.36.0
                 with:
                     php-version: "${{ matrix.php }}"
                     tools: "composer"
 
             -   name: "Install Composer dependencies"
-                uses: "ramsey/composer-install@v2"
+                uses: "ramsey/composer-install@1919f6c305aea6ab10e6181a8ddf72317ad77e0e" # 2.3.1
                 with:
                     dependency-versions: "highest"
 

.github/workflows/tests.yaml

@@ -33,16 +33,16 @@ jobs:
 
         steps:
             -   name: "Check out repository code"
-                uses: "actions/checkout@v3"
+                uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744" # v3.6.0
 
             -   name: "Setup PHP"
-                uses: "shivammathur/setup-php@v2"
+                uses: "shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1" # v2.36.0
                 with:
                     php-version: "${{ matrix.php }}"
                     tools: "${{ matrix.tools }}"
 
             -   name: "Install Composer dependencies"
-                uses: "ramsey/composer-install@v2"
+                uses: "ramsey/composer-install@1919f6c305aea6ab10e6181a8ddf72317ad77e0e" # 2.3.1
                 with:
                     dependency-versions: "${{ matrix.dependency-versions }}"
 
@@ -64,10 +64,10 @@ jobs:
 
         steps:
             -   name: "Check out repository code"
-                uses: "actions/checkout@v3"
+                uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744" # v3.6.0
 
             -   name: "Setup PHP"
-                uses: "shivammathur/setup-php@v2"
+                uses: "shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1" # v2.36.0
                 with:
                     php-version: "${{ matrix.php }}"
                     tools: "composer"
@@ -77,7 +77,7 @@ jobs:
                 run: find e2e -maxdepth 1 -mindepth 1 -type d -exec bash -c "cd {} && composer require --dev bamarni/composer-bin-plugin:dev-${GITHUB_SHA} --no-update" \;
 
             -   name: "Install Composer dependencies"
-                uses: "ramsey/composer-install@v2"
+                uses: "ramsey/composer-install@1919f6c305aea6ab10e6181a8ddf72317ad77e0e" # 2.3.1
                 with:
                     dependency-versions: "highest"