ci: patch versioning

.github/workflows/codeql.yml

@@ -50,17 +50,17 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v4.1.1
 
     - name: Setup JDK 17
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v4.0.0
       with:
         java-version: '17'
         distribution: 'zulu'
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v3.23.1
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -74,7 +74,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+      uses: github/codeql-action/autobuild@v3.23.1
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -87,6 +87,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v3.23.1
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/detekt.yml

@@ -45,25 +45,25 @@ jobs:
     steps:
     # Sets up JDK as a prerequisite to run Gradle
     - name: Setup Java
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v4.0.0
       with:
         java-version: '17'
         distribution: 'zulu'
 
     # Sets up the reviewdog cli
     - name: Setup reviewdog
-      uses: reviewdog/action-setup@v1
+      uses: reviewdog/action-setup@v1.2.0
 
     - name: Show reviewdog version
       run: reviewdog -version
 
     # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v4.1.1
 
     # Sets up Gradle as a prerequisite to run Detekt
     - name: Setup Gradle
-      uses: gradle/gradle-build-action@v2
+      uses: gradle/gradle-build-action@v2.12.0
       with:
         gradle-home-cache-cleanup: true
 
@@ -73,7 +73,7 @@ jobs:
 
     # Uploads Sarif Report to GitHub
     - name: Upload SARIF to GitHub
-      uses: github/codeql-action/upload-sarif@v3 # v3
+      uses: github/codeql-action/upload-sarif@v3.23.1
       if: success() || failure()
       with:
         sarif_file: build/reports/detekt/merge.sarif.json

.github/workflows/mobsf.yml

@@ -28,17 +28,17 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.1
 
       # Sets up the python as a prerequisites for MobSF
       - name: Setup python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v5.0.0
         with:
           python-version: 3.8
 
       # Sets up the reviewdog cli
       - name: Setup reviewdog
-        uses: reviewdog/action-setup@v1
+        uses: reviewdog/action-setup@v1.2.0
 
       - name: Show reviewdog version
         run: reviewdog -version
@@ -51,7 +51,7 @@ jobs:
 
       # Uploads Sarif Report to GitHub
       - name: Upload mobsfscan report
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v3.23.1
         if: success() || failure()
         with:
           sarif_file: mobsf.sarif.json