CI

We use GitHub actions. For all third-party GitHub actions, we must pin it to a specific hash to comply with internal policies.