Merge pull request #18 from OpenRailAssociation/renovate/github-actions-group

Author: mxmehl

.github/workflows/selftest.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Build website
         run: |
@@ -42,7 +42,7 @@ jobs:
           echo "baz" > dist/foobar.html
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: website
           path: dist
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Call action locally
         uses: ./
         with:

action.yml

@@ -210,7 +210,7 @@ runs:
     # ARTIFACT DOWNLOAD
     # ----------------------------------------------------------------------------------------------
     - name: Download Artifact
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
       if: env.IS_PRODUCTION == 'true' || env.IS_PREVIEW == 'true'
       with:
         name: ${{ inputs.artifact_name }}
@@ -235,7 +235,7 @@ runs:
       run: cp -r ${{ env.SOURCE_DIR }} ${{ env.SCP_UPLOAD_DIR }}
 
     - name: Upload Website to Server
-      uses: appleboy/[email protected]
+      uses: appleboy/scp-action@ff85246acaad7bdce478db94a363cd2bf7c90345 # v1.0.0
       with:
         host: ${{ inputs.ssh_host }}
         username: ${{ inputs.ssh_user }}
@@ -260,7 +260,7 @@ runs:
 
     - name: "Sticky Comment: Add or Update"
       if: inputs.sticky_comment_enabled == 'true' && env.IS_PREVIEW == 'true'
-      uses: marocchino/[email protected]
+      uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4
       with:
         header: pr-preview
         message: |
@@ -271,7 +271,7 @@ runs:
 
     - name: "Sticky Comment: Remove"
       if: inputs.sticky_comment_enabled == 'true' && env.IS_PR_CLOSED_OR_MERGED == 'true'
-      uses: marocchino/[email protected]
+      uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4
       with:
         header: pr-preview
         message: |
@@ -284,7 +284,7 @@ runs:
     # ----------------------------------------------------------------------------------------------
     - name: Run Link Checker
       if: ${{ inputs.linkchecker_enabled == 'true' && (env.IS_PRODUCTION == 'true' || env.IS_PREVIEW == 'true' ) }}
-      uses: lycheeverse/lychee-action@v2
+      uses: lycheeverse/lychee-action@82202e5e9c2f4ef1a55a3d02563e1cb6041e5332 # v2
       with:
         args: >-
           -r ${{ inputs.linkchecker_retry_times }}