chore: Fixed SHA commit values for non-GH GH actions (#1151)

Signed-off-by: Sebastian Schuster <[email protected]>

Author: sschu

.github/workflows/release.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Wait for acceptance tests
         id: wait
-        uses: "WyriHaximus/[email protected]"
+        uses: "WyriHaximus/github-action-wait-for-status@a0d59308face45c8229ad5aef809d6df5a0c7620" # version v1.8.0
         with:
           ignoreActions: Wait for acceptance tests
           checkInterval: 30
@@ -38,7 +38,7 @@ jobs:
 
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # version v6.2.0
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.GPG_PASSPHRASE }}
@@ -58,7 +58,7 @@ jobs:
           echo "name=NOTES::${tmp}/release-notes.md" >> $GITHUB_OUTPUT
 
       - name: GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 # version v6.2.1
         with:
           args: release --clean --release-notes=${{ steps.build-release-notes.outputs.NOTES }}
         env:

.github/workflows/test.yml

@@ -73,13 +73,13 @@ jobs:
           cache: true
 
       - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v3
+        uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # version v3.1.2
         with:
           terraform_wrapper: false
           terraform_version: 1.11.1
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v3
+        uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # version v4.3.0
       - name: Build user-federation-example with Gradle
         run:  make user-federation-example