Use github-script v8

Author: iainrussell

.github/workflows/pr-workflow-check.yml

@@ -14,7 +14,7 @@ jobs:
     steps:
       - name: Check changes to .github
         id: check
-        uses: actions/github-script@v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           script: |
             const files = await github.paginate(github.rest.pulls.listFiles, {
@@ -49,7 +49,7 @@ jobs:
 
       - name: Comment PR
         if: ${{ always() && steps.check.outputs.bad == 'true' }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           script: |
             github.rest.issues.createComment({