Infra: Pin workflow actions to commit versions

[Haarolean]

To prevent possible supply chain attacks, we need to pin every 3rd-party action versions to commits.
Instead of
uses: actions/checkout@v4 // <- v4 is a mutable tag and can be rewritten with a malicious code
use
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 // <- immutable

[Brijeshthummar02]

@Haarolean there are 15 workflow files which uses actions/checkout@v4 so we need to make it to Replace the tag (e.g., @v4) with the specific commit SHA of the action version you mentioned

 uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2

right. i will fix the issue assign me.

[Haarolean]

@Haarolean there are 15 workflow files which uses actions/checkout@v4 so we need to make it to Replace the tag (e.g., @v4) with the specific commit SHA of the action version you mentioned

 uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2

right. i will fix the issue assign me.

@Brijeshthummar02 this is not only about checkout action, rather about all of the actions we use.

[Brijeshthummar02]

@Haarolean can you provide me immutable for other actions too?

[Haarolean]

@Haarolean can you provide me immutable for other actions too?

you have to look up each one of them and find a matching commit for currently used version tags