chore(DATAGO-154079): Pin GitHub Actions to immutable SHA digests

Author: artyom-morozov

.github/workflows/brokenlinks.yml

@@ -7,8 +7,8 @@ jobs:
   Broken_Link_Checker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@master
-      - uses: gaurav-nelson/github-action-markdown-link-check@v1
+      - uses: actions/checkout@61b9e3751b92087fd0b06925ba6dd6314e06f089 # master
+      - uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 # v1
         with:
           folder-path: "markdown"
           use-quiet-mode: "yes"

.github/workflows/comment.yml

@@ -8,8 +8,8 @@ jobs:
     name: Add guidelines comment
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: harupy/comment-on-pr@master
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
+      - uses: harupy/comment-on-pr@c0522c44600040927a120b9309b531e3cb6f8d48 # master
         env:
           GITHUB_TOKEN: ${{ secrets.SOLACE_COMMUNITY_BOT_ULTIMATE }}
         with:

.github/workflows/export-codelab.yml

@@ -12,19 +12,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
           go-version: '1.20.5'
 
       - name: Checkout Current Branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
         with:
           fetch-depth: 0
           token: ${{ secrets.SOLACE_COMMUNITY_BOT_ULTIMATE }}
           path: main
 
       - name: Checkout claat repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
         with:
           ref: ${{ github.head_ref }}
           fetch-depth: 0

.github/workflows/fullbrokenlink.yml

@@ -9,21 +9,21 @@ jobs:
   weekly_broken_Link_Checker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
 
-      - uses: gaurav-nelson/github-action-markdown-link-check@v1
+      - uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 # v1
         with:
           use-quiet-mode: "yes"
           config-file: ".github/brokenlinks-config.json"
 
       - name: Create Issue
         if: failure()
-        uses: JasonEtco/create-an-issue@v2.9.2
+        uses: JasonEtco/create-an-issue@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5 # v2.9.2
         env:
           GITHUB_TOKEN: ${{ github.token }}
         with:

.github/workflows/netlify.yml

@@ -10,30 +10,30 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
           go-version: '1.20.5'
 
       - name: Install node 24.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '24.x'
 
       - name: Checkout Current Commit
-        uses: actions/checkout@master
+        uses: actions/checkout@61b9e3751b92087fd0b06925ba6dd6314e06f089 # master
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
           path: main
 
       - name: Checkout claat repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2
         with:
           repository: SolaceDev/google-tools
           path: google-tools
 
       - name: Checkout site repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2
         with:
           repository: SolaceDev/solace-dev-codelabs-site
           submodules: recursive
@@ -59,7 +59,7 @@ jobs:
           cd codelabs-site/site && npm ci && npm run dist
 
       - name: Netlify Deploy
-        uses: nwtgck/actions-netlify@v1.1.7
+        uses: nwtgck/actions-netlify@0798b5c54f7048599df8ff253d1d25edfe4e8ac1 # v1.1.7
         with:
           publish-dir: 'codelabs-site/site/dist'
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/site-update.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout site repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2
         with:
           repository: SolaceDev/solace-dev-codelabs-site
           submodules: recursive