Merge pull request #12 from NHSDigital/mm-odin-269-sonar-action-fixes

odin-269: explicit hashes on more actions

Author: matt-mercer

.github/actions/build-common/action.yml

@@ -51,7 +51,7 @@ runs:
 
     - name: Install tools from asdf config
       if: ${{ hashFiles('**/.tool-versions') }}
-      uses: ai/asdf-cache-action@v1
+      uses: ai/asdf-cache-action@d74eacf1ff3bb69ce232d6147c88704a9668db3a
 
     - name: cache virtualenv
       uses: actions/cache@v4

.github/actions/sonar-properties/action.yml

@@ -43,3 +43,8 @@ runs:
             fi
           done
         fi
+
+    - name: cat sonar-project.properties
+      shell: bash
+      run: |
+        cat sonar-project.properties

.github/workflows/merge-develop.yml

@@ -59,7 +59,7 @@ jobs:
           echo "version=${version}" >> "$GITHUB_OUTPUT"
 
       - name: install poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a
         with:
           version: ${{ steps.poetry-version.outputs.version }}
           plugins: poetry-dynamic-versioning