Merge pull request #722 from OssSecurityBot/oss-security-bot/pin-actions