chore(ci): pin bcgov actions (#2287)

Author: DerekRoberts

.github/workflows/.deployer-db.yml

@@ -88,7 +88,7 @@ jobs:
           fi
 
       - name: Deploy Database
-        uses: bcgov/action-oc-runner@v1.0.0
+        uses: bcgov/action-oc-runner@13d14b8f41df24226036385510472f683350850b # v1.0.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}
@@ -110,7 +110,7 @@ jobs:
 
       - name: Add PR specific user to Crunchy DB # only for PRs
         if: github.event_name == 'pull_request'
-        uses: bcgov/action-oc-runner@v1.0.0
+        uses: bcgov/action-oc-runner@13d14b8f41df24226036385510472f683350850b # v1.0.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}

.github/workflows/.deployer.yml

@@ -98,7 +98,7 @@ jobs:
       # Variables
       - if: inputs.tag  == ''
         id: pr
-        uses: bcgov/action-get-pr@v0.0.1
+        uses: bcgov/action-get-pr@21f9351425cd55a98e869ee28919a512aa30647d # v0.0.1
 
       - id: vars
         run: |
@@ -125,7 +125,7 @@ jobs:
 
       - name: Stop pre-existing deployments on PRs (status = pending-upgrade)
         if: github.event_name == 'pull_request'
-        uses: bcgov/action-oc-runner@v1.0.0
+        uses: bcgov/action-oc-runner@13d14b8f41df24226036385510472f683350850b # v1.0.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}
@@ -142,7 +142,7 @@ jobs:
 
       - name: Helm Deploy
         id: deploy
-        uses: bcgov/action-oc-runner@v1.0.0
+        uses: bcgov/action-oc-runner@13d14b8f41df24226036385510472f683350850b # v1.0.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}

.github/workflows/analysis.yml

@@ -34,7 +34,7 @@ jobs:
         ports:
           - 5432:5432
     steps:
-      - uses: bcgov/action-test-and-analyse@v1.2.1
+      - uses: bcgov/action-test-and-analyse@802833ad99951d349af0867a8e7ceb7cf5420a50 # v1.2.1
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_BACKEND }}
         with:
@@ -59,7 +59,7 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 5
     steps:
-      - uses: bcgov/action-test-and-analyse@v1.2.1
+      - uses: bcgov/action-test-and-analyse@802833ad99951d349af0867a8e7ceb7cf5420a50 # v1.2.1
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_FRONTEND }}
         with:

.github/workflows/demo.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Point DEMO URL to Existing Service
-        uses: bcgov/action-oc-runner@v1.0.0
+        uses: bcgov/action-oc-runner@13d14b8f41df24226036385510472f683350850b # v1.0.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}

.github/workflows/pr-close.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: Remove PR user and database from crunchy
         continue-on-error: true
-        uses: bcgov/action-oc-runner@v1.0.0
+        uses: bcgov/action-oc-runner@13d14b8f41df24226036385510472f683350850b # v1.0.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}

.github/workflows/pr-open.yml

@@ -22,7 +22,7 @@ jobs:
         package: [backend, frontend, migrations]
     timeout-minutes: 10
     steps:
-      - uses: bcgov/action-builder-ghcr@v2.3.0
+      - uses: bcgov/action-builder-ghcr@ace71f7a527ca6fc43c15c7806314be5a4579d2c # v2.3.0
         with:
           keep_versions: 50
           package: ${{ matrix.package }}

.github/workflows/scheduled.yml

@@ -21,7 +21,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Clean up Helm Releases
-        uses: bcgov/action-oc-runner@v1.0.0
+        uses: bcgov/action-oc-runner@13d14b8f41df24226036385510472f683350850b # v1.0.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}