chore(deps): pin dependencies

Signed-off-by: Mend Renovate <[email protected]>

Author: renovate-bot

.github/workflows/ci-comment.yml

@@ -21,7 +21,7 @@ jobs:
 
       - name: Download all metrics artifacts from triggering workflow
         id: download-artifacts
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           script: |
             const { owner, repo } = context.repo;
@@ -109,7 +109,7 @@ jobs:
 
       - name: Post PR comment with combined metrics summary
         if: steps.compare-metrics.outputs.DIFF_FOUND == 'true' && steps.download-artifacts.outputs.pr_number
-        uses: thollander/actions-comment-pull-request@v3
+        uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3
         with:
           file-path: ./.metrics/combined_summary.md
           github-token: '${{ secrets.GITHUB_TOKEN }}'

.github/workflows/ci-e2e-all.yml

@@ -49,7 +49,7 @@ jobs:
         run: echo "${{ github.event.number }}" > pr_number.txt
       - name: Upload PR number artifact
         if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: pr_number
           path: pr_number.txt

.github/workflows/fossa.yml

@@ -39,7 +39,7 @@ jobs:
           echo "$GOPATH/bin" >>"$GITHUB_PATH"
 
       - name: Run FOSSA scan and upload report
-        uses: fossa-contrib/[email protected]
+        uses: fossa-contrib/fossa-action@3d2ef181b1820d6dcd1972f86a767d18167fa19b # v3.0.1
         with:
           # FOSSA Push-Only API Token
           fossa-api-key: 304657e2357ba57b416b94e6b119131b