Make your GitHub Actions usage more secure by pinning them to their SHA's.

# Homebrew:
brew install caarlos0/tap/pinata

# Go:
go install github.com/caarlos0/pinata@latest

Or download from the releases page.

$ pinata [dir] # Defaults to .github/workflows
$ pinata ./myrepo/.github/workflows