From 2d688a0cc84e060d870b72c5b7e1eafe4ce92bc9 Mon Sep 17 00:00:00 2001
From: Niklaus Schen <8458369+Water-Melon@users.noreply.github.com>
Date: Thu, 16 Jan 2025 10:57:45 +0800
Subject: [PATCH] chore(ci): pin 3rd-party actions to specific commit hashes
 (#14165)

actions-rs/cargo and actions-rs/toolchain

KAG-6149

(cherry picked from commit 6df1cf94b9f493ffe6533f1ac0f9124adcd7e8cd)
---
 .github/actions/build-wasm-test-filters/action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/actions/build-wasm-test-filters/action.yml b/.github/actions/build-wasm-test-filters/action.yml
index f4e4cd84824..933110ca2da 100644
--- a/.github/actions/build-wasm-test-filters/action.yml
+++ b/.github/actions/build-wasm-test-filters/action.yml
@@ -31,7 +31,7 @@ runs:
 
     - name: Install Rust Toolchain
       if: steps.restore-cache.outputs.cache-hit != 'true'
-      uses: actions-rs/toolchain@v1
+      uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
       with:
         profile: minimal
         toolchain: stable
@@ -41,7 +41,7 @@ runs:
 
     - name: cargo build
       if: steps.restore-cache.outputs.cache-hit != 'true'
-      uses: actions-rs/cargo@v1
+      uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
       with:
         command: build
         # building in release mode yields smaller library sizes, so it's