Pin GitHub Actions to full-length commit SHAs

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7

.github/workflows/defaultLabels.yml

@@ -14,7 +14,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
 
-      - uses: actions/stale@v3
+      - uses: actions/stale@98ed4cb500039dbcccf4bd9bedada4d0187f2757 # v3.0.19
         name: Setting issue as idle
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -25,7 +25,7 @@ jobs:
           operations-per-run: 100
           exempt-issue-labels: 'backlog'
 
-      - uses: actions/stale@v3
+      - uses: actions/stale@98ed4cb500039dbcccf4bd9bedada4d0187f2757 # v3.0.19
         name: Setting PR as idle
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/health-dashboard.yml

@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
       - name: Generate Dashboard
         id: dashboard
-        uses: GH-ACE/issue-dashboard@v1
+        uses: GH-ACE/issue-dashboard@d7968ad7cce5bc920fed58f9001b22d581338b71 # v1
         with:
           config: ./dashboard-config/health-dashboard-config.yml
           configType: file

.github/workflows/issue-view.yml

@@ -8,10 +8,10 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
       - name: 'Generate Dashboard'
         id: dashboard
-        uses: GH-ACE/issue-dashboard@v1
+        uses: GH-ACE/issue-dashboard@d7968ad7cce5bc920fed58f9001b22d581338b71 # v1
         with:
           config: ./dashboard-config/issue-view-config.yml
           configType: file

.github/workflows/issues-ace-team.yml

@@ -8,10 +8,10 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
       - name: 'Generate Dashboard'
         id: dashboard
-        uses: GH-ACE/issue-dashboard@v1
+        uses: GH-ACE/issue-dashboard@d7968ad7cce5bc920fed58f9001b22d581338b71 # v1
         with:
           config: ./dashboard-config/ace-team-issues-config.yml
           configType: file

.github/workflows/pr-view.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
 
     - name: 'Generate Dashboard'
       id: dashboard
-      uses: GH-ACE/issue-dashboard@v1
+      uses: GH-ACE/issue-dashboard@d7968ad7cce5bc920fed58f9001b22d581338b71 # v1
       with:
         config: ./dashboard-config/pr-view-config.yml
         configType: file

.github/workflows/transitioned-issues.yml

@@ -8,10 +8,10 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
       - name: 'Generate Dashboard'
         id: dashboard
-        uses: GH-ACE/issue-dashboard@v1
+        uses: GH-ACE/issue-dashboard@d7968ad7cce5bc920fed58f9001b22d581338b71 # v1
         with:
           config: ./dashboard-config/transitioned-issues-config.yml
           configType: file

.github/workflows/validation-repo-test.yml

@@ -9,7 +9,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
     - name: validating action repos
       id: checks_validation
       uses: GH-ACE/action-repo-validation@users/balaga-gayatri/release-patch
@@ -19,7 +19,7 @@ jobs:
         repositories: 'Azure/login,Azure/webapps-deploy,Azure/aci-deploy,Azure/build-vm-image,Azure/functions-action,Azure/functions-container-action,Azure/mysql,Azure/postgresql,Azure/powershell,Azure/sql-action,Azure/appservice-settings,Azure/policy-compliance-scan,Azure/k8s-create-secret,Azure/k8s-deploy,Azure/k8s-lint,Azure/manage-azure-policy,Azure/setup-kubectl,Azure/aks-set-context,Azure/k8s-bake,Azure/static-web-apps-deploy,Azure/get-keyvault-secrets,Azure/AppConfiguration-Sync,Azure/k8s-set-context,Azure/setup-helm,Azure/container-scan,Azure/docker-login,Azure/publish-security-assessments,Azure/arm-deploy,Azure/cli'
     - name: create-json
       id: create-json
-      uses: jsdaniell/create-json@1.1.2
+      uses: jsdaniell/create-json@4a4e510bf85e1193b9fca74074d2bf4ee26de08c # 1.1.2
       with:
         name: "validation-dashboard/result.json"
         json: "${{steps.checks_validation.outputs.validationResult}}"
@@ -44,7 +44,7 @@ jobs:
       with:
         github_token: "${{ secrets.GITHUB_TOKEN }}"
 
-    - uses: actions/setup-python@v2
+    - uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2.3.4
       with:
         python-version: '3.9.0-alpha - 3.9.0' # SemVer's version range syntax
     - run: |