Name setup-ruby's pin by its exact tag
zizmor flags a hash pin whose comment names a branch: v1 has moved on
from this commit, which is tagged v1.322.0.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014U2t8JuR681EA8GQD9z5mD
change
commit df404c07543be559791fa91061d484aca1ab42ba
author Claude <noreply@anthropic.com>
date
parent 779e5150 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2e2356d..f0fb524 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@bec3f19a76460dbe12f60def7d1a77585f07516c # v1
+      - uses: ruby/setup-ruby@bec3f19a76460dbe12f60def7d1a77585f07516c # v1.322.0
         with:
           bundler-cache: true
       - run: bundle exec rake