Pinned action by SHA and included the URL for verification

.github/workflows/build-blog-only.yml

@@ -13,8 +13,8 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
+      - uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn

.github/workflows/build-perf.yml

@@ -18,12 +18,12 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
+      - uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn
-      - uses: preactjs/compressed-size-action@v2
+      - uses: preactjs/compressed-size-action@8119d3d31b6e57b167e09c81dfa877eada3bcb35 # v2 https://api.github.com/repos/preactjs/compressed-size-action/git/commits/8119d3d31b6e57b167e09c81dfa877eada3bcb35
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           build-script: build:website:en
@@ -37,8 +37,8 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
+      - uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           cache: yarn
       - name: Installation

.github/workflows/canary-release.yml

@@ -12,11 +12,11 @@ jobs:
     name: Publish Canary
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
         with:
           fetch-depth: 0 # Needed to get the commit number with "git rev-list --count HEAD"
       - name: Set up Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn

.github/workflows/codeql-analysis.yml

@@ -27,12 +27,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@883476649888a9e8e219d5b2e6b789dc024f690c # v1 https://api.github.com/repos/github/codeql-action/git/commits/883476649888a9e8e219d5b2e6b789dc024f690c
         with:
           languages: ${{ matrix.language }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v1
+        uses: github/codeql-action/analyze@883476649888a9e8e219d5b2e6b789dc024f690c # v1 https://api.github.com/repos/github/codeql-action/git/commits/883476649888a9e8e219d5b2e6b789dc024f690c

.github/workflows/lighthouse-report.yml

@@ -10,16 +10,16 @@ jobs:
     name: Lighthouse Report
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Wait for the Netlify Preview
-        uses: jakepartusch/wait-for-netlify-action@v1
+        uses: jakepartusch/wait-for-netlify-action@7dcdeb40c6bc3710a8099702a1fa1ce2c5e322a6 # v1 https://api.github.com/repos/JakePartusch/wait-for-netlify-action/git/commits/7dcdeb40c6bc3710a8099702a1fa1ce2c5e322a6
         id: netlify
         with:
           site_name: docusaurus-2
           max_timeout: 600
       - name: Audit URLs using Lighthouse
         id: lighthouse_audit
-        uses: treosh/[email protected]
+        uses: treosh/lighthouse-ci-action@b4dfae3eb959c5226e2c5c6afd563d493188bfaf # 9.3.0 https://api.github.com/repos/treosh/lighthouse-ci-action/git/commits/b4dfae3eb959c5226e2c5c6afd563d493188bfaf
         with:
           urls: |
             https://deploy-preview-$PR_NUMBER--docusaurus-2.netlify.app/
@@ -30,7 +30,7 @@ jobs:
           PR_NUMBER: ${{ github.event.pull_request.number}}
       - name: Format lighthouse score
         id: format_lighthouse_score
-        uses: actions/github-script@v6
+        uses: actions/github-script@7f4e771d2b3022fa3b8bac499d4a547619f3ab10 # v6 https://api.github.com/repos/actions/github-script/git/tags/7f4e771d2b3022fa3b8bac499d4a547619f3ab10
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -55,7 +55,7 @@ jobs:
 
       - name: Add Lighthouse stats as comment
         id: comment_to_pr
-        uses: marocchino/[email protected]
+        uses: marocchino/sticky-pull-request-comment@39c5b5dc7717447d0cba270cd115037d32d28443 # v2.2.0 https://api.github.com/repos/marocchino/sticky-pull-request-comment/git/commits/39c5b5dc7717447d0cba270cd115037d32d28443
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           number: ${{ github.event.pull_request.number }}

.github/workflows/lint.yml

@@ -11,8 +11,8 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
+      - uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn

.github/workflows/showcase-test.yml

@@ -13,9 +13,9 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Set up Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn

.github/workflows/tests-e2e.yml

@@ -21,9 +21,9 @@ jobs:
       matrix:
         node: ['14', '16', '17']
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: ${{ matrix.node }}
           cache: yarn
@@ -59,9 +59,9 @@ jobs:
           - variant: -st
             nodeLinker: pnp
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Use Node.js 16
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn
@@ -104,9 +104,9 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Use Node.js 16
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn
@@ -133,9 +133,9 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Use Node.js 16
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: '16'
           cache: yarn

.github/workflows/tests-swizzle.yml

@@ -17,9 +17,9 @@ jobs:
         action: ['eject', 'wrap']
         variant: ['js', 'ts']
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: 14
           cache: yarn

.github/workflows/tests-windows.yml

@@ -18,9 +18,9 @@ jobs:
     steps:
       - name: Support longpaths
         run: git config --system core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: ${{ matrix.node }}
       - name: Installation

.github/workflows/tests.yml

@@ -16,9 +16,9 @@ jobs:
       matrix:
         node: ['14', '16', '17']
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 https://api.github.com/repos/actions/checkout/git/tags/b0e28b5ac45a892f91e7d036f8200cf5ed489415
       - name: Use Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # v3 https://api.github.com/repos/actions/setup-node/git/commits/9ced9a43a244f3ac94f13bfd896db8c8f30da67a
         with:
           node-version: ${{ matrix.node }}
           cache: yarn