pin github action versions

.github/workflows/e2e.yaml

@@ -14,10 +14,10 @@ jobs:
       name: acctests
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 #v3.6.0
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v34
+        uses: tj-actions/changed-files@716b1e13042866565e00e85fd4ec490e186c4a2f #v41.0.1
         with:
           dir_names: "true"
           separator: ","
@@ -31,7 +31,7 @@ jobs:
           export ARM_TENANT_ID=$(az login --identity --username $MSI_ID | jq -r '.[0] | .tenantId')
           export CHANGED_FOLDERS="${{ steps.changed-files.outputs.all_changed_files }}"
           docker run --rm -v $(pwd):/src -w /src/test --network=host -e MSI_ID -e ARM_SUBSCRIPTION_ID -e ARM_TENANT_ID -e ARM_USE_MSI=true -e CHANGED_FOLDERS mcr.microsoft.com/azterraform:latest sh -c "go mod tidy && go test -timeout=360m -v ./e2e"
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 #v3.1.3
         with:
           name: TestRecord-${{ github.event.number }}
           retention-days: 60

.github/workflows/pr-check.yaml

@@ -12,10 +12,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 #v3.6.0
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v34
+        uses: tj-actions/changed-files@716b1e13042866565e00e85fd4ec490e186c4a2f #v41.0.1
         with:
           dir_names: "true"
           separator: ","

.github/workflows/pr-merged.yaml

@@ -15,12 +15,12 @@ jobs:
           branch=$(curl -s "https://api.github.com/repos/$GITHUB_REPOSITORY" | jq -r '.default_branch')
           echo "default_branch=$branch" >> $GITHUB_ENV
       - name: checkout
-        uses: actions/checkout@v3
-      - uses: 8BitJonny/gh-get-current-pr@2.1.0
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 #v3.6.0
+      - uses: 8BitJonny/gh-get-current-pr@2215326c76d51bfa3f2af0a470f32677f6c0cae9 #2.1.0
         id: PR
       - name: Download artifact
         id: download-artifact
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e #v2.28.0
         with:
           github_token: ${{secrets.GITHUB_TOKEN}}
           workflow: e2e.yaml
@@ -32,7 +32,7 @@ jobs:
         run: |
           sh scripts/update-test-record.sh
       - name: Commit & Push changes
-        uses: actions-js/push@master
+        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 #v1.4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           message: 'Update TestRecord'

.github/workflows/weekly-e2e.yaml

@@ -12,7 +12,7 @@ jobs:
       name: crontests
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 #v3.6.0
       - name: test all examples
         continue-on-error: true
         timeout-minutes: 1440
@@ -29,7 +29,7 @@ jobs:
           sudo chmod -R a+rwX .
           sudo find . -type d -exec chmod g+s '{}' +
       - name: Commit & Push changes
-        uses: actions-js/push@master
+        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 #v1.4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           message: 'Update TestRecord'