ci: Pin actions

.github/workflows/chart-release-steps.yaml

@@ -57,18 +57,18 @@ jobs:
       # Setup
       # ----------------------------
       - name: Checkout source branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           path: src
 
       - name: Install Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4.3.0
         with:
           version: ${{ inputs.helmVersion }}
 
       - name: Login to OCI Registry
         if: ${{ inputs.publishToOciRegistry }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -79,7 +79,7 @@ jobs:
       # ----------------------------
       - name: Get chart details
         id: chart-details
-        uses: bjw-s/helm-charts-actions/get-chart-details@main
+        uses: bjw-s-labs/helm-charts-actions/get-chart-details@main
         with:
           path: src/charts/${{ inputs.chart }}
           validateChartYaml: true
@@ -96,7 +96,7 @@ jobs:
 
       - name: Format changelog
         id: format-changelog
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             let input = '${{ steps.chart-details.outputs.changes }}';
@@ -128,7 +128,7 @@ jobs:
       # Package Helm chart
       # ----------------------------
       - name: Dereference JSON schema before packaging
-        uses: bjw-s/helm-charts-actions/dereference-json-schema@main
+        uses: bjw-s-labs/helm-charts-actions/dereference-json-schema@main
         with:
           schemaFile: "src/charts/${{ inputs.chart }}/values.schema.json"
           outputFile: "src/charts/${{ inputs.chart }}/values.schema.json"
@@ -149,7 +149,7 @@ jobs:
       # Add chart to GitHub Pages
       # ----------------------------
       - name: Checkout gh-pages branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         if: ${{ inputs.publishToGhPages }}
         with:
           path: gh-pages
@@ -183,7 +183,7 @@ jobs:
 
       - name: Commit Changes
         if: ${{ inputs.publishToGhPages }}
-        uses: stefanzweifel/git-auto-commit-action@v5
+        uses: stefanzweifel/git-auto-commit-action@e348103e9026cc0eee72ae06630dbe30c8bf7a79 # v5.1.0
         with:
           commit_message: "feat: Add Chart package ${{ steps.chart-folder.outputs.chart_folder }}/${{ steps.chart-details.outputs.name }}-${{ steps.chart-details.outputs.version }}"
           repository: gh-pages
@@ -205,13 +205,13 @@ jobs:
       # ----------------------------
       - name: Create tag
         if: ${{ inputs.createGithubRelease }}
-        uses: EndBug/latest-tag@latest
+        uses: EndBug/latest-tag@c24a76ea69bf06f7f0e43a48b61c2b51b99d6c42 # latest
         with:
           ref: ${{ steps.chart-details.outputs.name }}-${{ steps.chart-details.outputs.version }}
           git-directory: src
 
       - name: Create release for tag
-        uses: ncipollo/release-action@v1
+        uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1.16.0
         if: ${{ inputs.createGithubRelease }}
         with:
           allowUpdates: true
@@ -223,7 +223,7 @@ jobs:
       # ----------------------------
       - name: Install Cosign
         if: ${{ inputs.publishToOciRegistry }}
-        uses: sigstore/cosign-installer@v3.8.0
+        uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
 
       - name: Push Helm charts to OCI registry
         if: ${{ inputs.publishToOciRegistry }}