From afb96dbee28847f6c574446a97a314a71a11e902 Mon Sep 17 00:00:00 2001
From: Timothy Stewart <timothystewart6@gmail.com>
Date: Tue, 1 Nov 2022 19:48:31 -0500
Subject: [PATCH] fix(ci): pin + cache

---
 .github/workflows/lint.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index bd4ca023..89065355 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   pre-commit-ci:
     name: Pre-Commit
-    runs-on: [self-hosted, Linux, x64]
+    runs-on: self-hosted
     env:
       PYTHON_VERSION: "3.10"
 
@@ -40,3 +40,15 @@ jobs:
 
       - name: Run pre-commit
         uses: pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507 # 3.0.0
+  ensure-pinned-actions:
+    name: Ensure SHA Pinned Actions
+    runs-on: self-hosted
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # 3.0.2
+      - name: Ensure SHA pinned actions
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@6ca5574367befbc9efdb2fa25978084159c5902d # 1.3.0
+        with:
+          allowlist: |
+            aws-actions/
+            docker/login-action
\ No newline at end of file