Merge pull request #128 from hashicorp/tsccr-auto-pinning/trusted/2023-04-03

SEC-090: Automated trusted workflow pinning (2023-04-03)

Author: Evan Phoenix

.github/workflows/test.yml

@@ -15,10 +15,10 @@ jobs:
         os: [ubuntu-latest, windows-latest, macOS-latest]
     steps:
       - name: Install Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
         with:
           go-version: ${{ matrix.go-version }}
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
       - name: Test
         run: go test -v ./...