gh workflow assign-pr: pin

Author: ryanbr

.github/workflows/main.yml

@@ -16,12 +16,12 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     steps:
       - name: Clone repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
       - name: Clone uAssets
         run: |
-          tools/pull-assets.sh
+          tools/pull-assets.11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Get release information
         run: |
           echo "VERSION=${GITHUB_REF/refs\/tags\//}" >> $GITHUB_ENV
@@ -37,7 +37,7 @@ jobs:
           sed -e 's/%version%/${{ env.VERSION }}/g' RELEASE.HEAD.md >> release.body.txt
       - name: Create GitHub release
         id: create_release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
         env:
           GITHUB_TOKEN: ${{ github.token }}
         with: