attempt to improve security

Author: Antony Bailey

.github/workflows/sha-pins.yml

@@ -16,19 +16,19 @@ jobs:
             - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
             - name: Set up Python
-                uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
-                with:
-                    python-version: '3.11'
+              uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
+              with:
+                  python-version: '3.11'
 
             - name: Install dependencies
-                run: |
-                    python -m pip install --upgrade pip
-                    pip install PyGithub pyyaml
+              run: |
+                  python -m pip install --upgrade pip
+                  pip install PyGithub pyyaml
 
             - name: Check workflows and update action references
-                env:
-                    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-                run: |
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+              run: |
                     python - <<'EOF'
                     import os
                     import re