Change: Versions immutable through hashcode

.github/workflows/codeql.yml

@@ -26,16 +26,16 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@396bb3e45325a47dd9ef434068033c6d5bb0d11a
       with:
         languages: ${{ matrix.language }}
         queries: security-and-quality
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@396bb3e45325a47dd9ef434068033c6d5bb0d11a
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/release.yml

@@ -24,7 +24,7 @@ jobs:
       name: release
       url: https://github.com/greenbone/actions/releases
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
         with:
           token: ${{ secrets.GREENBONE_BOT_TOKEN }}
           fetch-depth: 0 # for conventional commits

.github/workflows/test-doc-coverage.yml

@@ -23,7 +23,7 @@ jobs:
     name: Test doc coverage for c language
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Run test
         uses: ./doc-coverage-clang
         continue-on-error: true

.github/workflows/test-download-artifacts-test-workflow.yml

@@ -11,7 +11,7 @@ jobs:
         run: |
           echo $RANDOM | sha256sum | cut -f 1 -d ' ' > content.txt
       - name: Upload Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
         with:
           name: artifact
           path: content.txt

.github/workflows/test-download-artifacts.yml

@@ -12,7 +12,7 @@ jobs:
     name: Test Artifact Downloading
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Determine Branch
         id: branch
         run: |

.github/workflows/test-hashsums.yml

@@ -14,7 +14,7 @@ jobs:
     name: Test creating sha256sums file
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Create a sha256sums file
         uses: ./hashsums
         with:

.github/workflows/test-is-latest-tag.yml

@@ -14,7 +14,7 @@ jobs:
     name: Test older Tag
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup Repo and Tag
         run: |
           mkdir -p /tmp/repo
@@ -45,7 +45,7 @@ jobs:
     name: Test newer Tag
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup Repo and Tag
         run: |
           mkdir -p /tmp/repo
@@ -76,7 +76,7 @@ jobs:
     name: Test is latest Tag
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup Repo and Tag
         run: |
           mkdir -p /tmp/repo
@@ -107,7 +107,7 @@ jobs:
     name: Test branch as latest Tag
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup Repo and Tag
         run: |
           mkdir -p /tmp/repo
@@ -138,7 +138,7 @@ jobs:
     name: Test empty tag name as latest Tag
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup Repo and Tag
         run: |
           mkdir -p /tmp/repo

.github/workflows/test-python.yml

@@ -14,7 +14,7 @@ jobs:
     name: Install poetry
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Install poetry
         uses: ./poetry
         with:
@@ -26,7 +26,7 @@ jobs:
     name: Test Coverage Python
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Install poetry
         uses: ./coverage-python
         with:
@@ -38,7 +38,7 @@ jobs:
     name: Test Linting Python
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Install poetry
         uses: ./lint-python
         with:
@@ -50,9 +50,9 @@ jobs:
     name: Test Pipx Install
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup Pyhton
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b
         id: python
         with:
           python-version: "3.11"

.github/workflows/test-signature.yml

@@ -15,7 +15,7 @@ jobs:
     name: Test creating signature file
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Create a signature file
         uses: ./signature
         with:

.github/workflows/test-trigger-workflow.yml

@@ -12,7 +12,7 @@ jobs:
     name: Trigger long running workflow with timeout
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Determine Ref
         id: ref
         run: |
@@ -45,7 +45,7 @@ jobs:
     name: Trigger workflow successfully
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Determine Ref
         id: ref
         run: |
@@ -70,7 +70,7 @@ jobs:
     name: Trigger failing workflow successfully
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Determine Ref
         id: ref
         run: |

.github/workflows/unittests.yml

@@ -14,7 +14,7 @@ jobs:
     name: Run unit tests for backport-pull-request action
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup project
         uses: greenbone/actions/poetry@main
         with: