feat: pin foreign action SHA

Signed-off-by: Oskar Manhart <[email protected]>

Author: oskardotglobal

.github/workflows/ci.yaml

@@ -6,18 +6,20 @@ on:
   pull_request:
     branches: [ "rewrite" ]
 
+permissions:
+  checks: write
+
 jobs:
   check:
     runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v4
 
-      - uses: crusty-pie/toolchain@v1
+      - uses: dtolnay/rust-toolchain@nightly
         with:
-          toolchain: nightly
           components: clippy
 
-      - uses: crusty-pie/clippy@v1
+      - uses: auguwu/clippy[email protected]
         with:
-          args: --all-features
+          token: ${{ secrets.GITHUB_TOKEN }}