fix: pin action to official source instead of bash execution

Author: willingc

.github/workflows/main.yml

@@ -13,7 +13,6 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Check workflow files
-        run: |
-          bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
-          ./actionlint -color -ignore SC2129
-        shell: bash
+        uses: rhysd/actionlint@35082e035dc23c2dea5e58bbde3cfe1523204498 # v1.7.7
+        with:
+          args: -color -ignore SC2129