Merge pull request #1658 from step-security-bot/stepsecurity_remediat…

…ion_1727858339

ci: harden GitHub Actions

.github/workflows/check-for-typos.yml

@@ -3,13 +3,21 @@ name: Typo Check Action
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   run:
     name: Spell Check with Typos
     runs-on: ubuntu-latest
     steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
+      with:
+        egress-policy: audit
+
     - name: Checkout Actions Repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
     - name: Check spelling
-      uses: crate-ci/typos@master
+      uses: crate-ci/typos@14f49f455cf3b6a38841665e82c3b9135b91c929 # master