From 036568ca78d635ca415e303a249339209fa50595 Mon Sep 17 00:00:00 2001
From: Drew Hintz <hintz@openai.com>
Date: Tue, 7 Apr 2026 21:47:47 -0500
Subject: [PATCH] Pin GitHub Actions workflow references

---
 .github/workflows/bazel.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/bazel.yml b/.github/workflows/bazel.yml
index 2e14184800..d8f76f8f60 100644
--- a/.github/workflows/bazel.yml
+++ b/.github/workflows/bazel.yml
@@ -65,7 +65,7 @@ jobs:
       - name: Restore bazel repository cache
         id: cache_bazel_repository_restore
         continue-on-error: true
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
         with:
           path: ${{ steps.setup_bazel.outputs.repository-cache-path }}
           key: bazel-cache-${{ matrix.target }}-${{ hashFiles('MODULE.bazel', 'codex-rs/Cargo.lock', 'codex-rs/Cargo.toml') }}
@@ -168,7 +168,7 @@ jobs:
       - name: Restore bazel repository cache
         id: cache_bazel_repository_restore
         continue-on-error: true
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
         with:
           path: ${{ steps.setup_bazel.outputs.repository-cache-path }}
           key: bazel-cache-${{ matrix.target }}-${{ hashFiles('MODULE.bazel', 'codex-rs/Cargo.lock', 'codex-rs/Cargo.toml') }}