From 3fc1617dd3c4c4f4347827171a0b9968d143d258 Mon Sep 17 00:00:00 2001
From: Drew Hintz <hintz@openai.com>
Date: Wed, 8 Apr 2026 18:05:24 -0500
Subject: [PATCH] Pin GitHub Actions workflow references

---
 .github/actions/run-rust-python-tests/action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/actions/run-rust-python-tests/action.yml b/.github/actions/run-rust-python-tests/action.yml
index b06aefb..f4dfd1b 100644
--- a/.github/actions/run-rust-python-tests/action.yml
+++ b/.github/actions/run-rust-python-tests/action.yml
@@ -16,13 +16,13 @@ runs:
   using: composite
   steps:
     - name: Setup Rust toolchain
-      uses: dtolnay/rust-toolchain@stable
+      uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       with:
         toolchain: ${{ inputs.rust-toolchain }}
         components: clippy,rustfmt
 
     - name: Setup Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ inputs.python-version }}