Pin exact action commits.

Author: Jadarma

.github/workflows/build.yml

@@ -1,5 +1,11 @@
 name: 'Build'
 
+# Action Dependency Pins:
+# actions/checkout            - 08c6903cd8c0fde910a37f88322edcfb5dd907a8 - v5.0.0 - https://github.com/actions/checkout/releases
+# actions/setup-java          - dded0888837ed1f317902acf8a20df0ad188d165 - v5.0.0 - https://github.com/actions/setup-java/releases
+# actions/upload-artifact     - ea165f8d65b6e75b540449e92b4886f43607fa02 - v4.6.2 - https://github.com/actions/upload-artifact/releases
+# gradle/actions/setup-gradle - ed408507eac070d1f99cc633dbcf757c94c7933a - v4.4.3 - https://github.com/gradle/actions/releases
+
 on:
   push:
     branches: [ main ]
@@ -11,18 +17,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Checkout'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - name: 'Setup Java'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
         with:
           java-version: '21'
           distribution: 'adopt'
       - name: 'Setup Gradle'
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a
       - name: 'Build'
         run: ./gradlew build
       - name: 'Upload Build Reports'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: 'build-reports'

.github/workflows/docs.yml

@@ -1,5 +1,12 @@
 name: 'Documentation Site'
 
+# Action Dependency Pins:
+# actions/checkout                    - 08c6903cd8c0fde910a37f88322edcfb5dd907a8 - v5.0.0 - https://github.com/actions/checkout/releases
+# actions/upload-pages-artifact       - 7b1f4a764d45c48632c6b24a0339c27f5614fb0b - v4.0.0 - https://github.com/actions/upload-pages-artifact/releases
+# actions/deploy-pages                - d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e - v4.0.5 - https://github.com/actions/deploy-pages/releases
+# JetBrains/writerside-github-action  - 73f8f377e7c6a64cce73ca73fe07bbba9a34d556 - v4     - https://github.com/JetBrains/writerside-github-action/releases
+# JetBrains/writerside-checker-action - 23e928973d7703bc49a3f8ea9f7cb699aac56134 - v1     - https://github.com/JetBrains/writerside-checker-action/releases
+
 on:
   workflow_dispatch:
 
@@ -11,24 +18,20 @@ jobs:
       ARTIFACT: 'webHelpAOCKT2-all.zip'
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@v4
-
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - name: 'Build Writerside Docs'
-        uses: JetBrains/writerside-github-action@v4
+        uses: JetBrains/writerside-github-action@73f8f377e7c6a64cce73ca73fe07bbba9a34d556
         with:
           instance: ${{ env.INSTANCE }}
           artifact: ${{ env.ARTIFACT }}
-
       - name: 'Test Writerside Docs'
-        uses: JetBrains/writerside-checker-action@v1
+        uses: JetBrains/writerside-checker-action@23e928973d7703bc49a3f8ea9f7cb699aac56134
         with:
           instance: artifacts/${{ env.INSTANCE }}
-
       - name: 'Unzip Artifact'
         run: unzip -qq 'artifacts/${{ env.ARTIFACT }}' -d public
-
       - name: 'Upload Pages Artifact'
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
         with:
           path: ./public
 
@@ -44,4 +47,4 @@ jobs:
     steps:
       - name: 'Deploy to GitHub Pages'
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/publish.yml

@@ -1,5 +1,10 @@
 name: 'Publish'
 
+# Action Dependency Pins:
+# actions/checkout            - 08c6903cd8c0fde910a37f88322edcfb5dd907a8 - v5.0.0 - https://github.com/actions/checkout/releases
+# actions/setup-java          - dded0888837ed1f317902acf8a20df0ad188d165 - v5.0.0 - https://github.com/actions/setup-java/releases
+# gradle/actions/setup-gradle - ed408507eac070d1f99cc633dbcf757c94c7933a - v4.4.3 - https://github.com/gradle/actions/releases
+
 on:
   workflow_dispatch:
     inputs:
@@ -21,14 +26,14 @@ jobs:
       ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }}
     steps:
       - name: 'Checkout'
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - name: 'Setup Java'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
         with:
           java-version: '21'
           distribution: 'adopt'
       - name: 'Setup Gradle'
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a
         with:
           cache-read-only: true
       - name: 'Publish'