From 3bb9441cc371e7204de74e891934fa84ba645aa4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Herv=C3=A9=20Le=20Meur?=
 <91831478+lemeurherve@users.noreply.github.com>
Date: Fri, 24 Feb 2023 16:01:41 +0100
Subject: [PATCH] chore: pin GitHub actions with their SHA-1 instead of their
 version number (#525)

---
 .github/workflows/release-drafter.yml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index d5e8d6e0d..3d0554299 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -1,17 +1,14 @@
----
 name: Release Drafter
-
 on:
   push:
     branches:
       - main
   workflow_dispatch:
-
 jobs:
   update_release_draft:
     runs-on: ubuntu-20.04
     steps:
-      - uses: release-drafter/release-drafter@v5
+      - uses: release-drafter/release-drafter@569eb7ee3a85817ab916c8f8ff03a5bd96c9c83e # v5
         env:
           # This token is generated automatically by default in GitHub Actions: no need to create it manually
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}