From a091dbdc0282de8365aa4f8d2d7ffe11b6e04771 Mon Sep 17 00:00:00 2001
From: "renovate-pagopa[bot]"
 <164534245+renovate-pagopa[bot]@users.noreply.github.com>
Date: Mon, 3 Jun 2024 05:34:24 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/check_helm.yml     | 4 ++--
 .github/workflows/pr-title.yml       | 2 +-
 .github/workflows/release-manual.yml | 6 +++---
 .github/workflows/release.yml        | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/check_helm.yml b/.github/workflows/check_helm.yml
index 6f06ba3..d74d4f8 100644
--- a/.github/workflows/check_helm.yml
+++ b/.github/workflows/check_helm.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: setup_python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
 
       - name: setup_pip
         run: |
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index 2368139..489be81 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       # Please look up the latest version from
       # https://github.com/amannn/action-semantic-pull-request/releases
-      - uses: amannn/action-semantic-pull-request@v3.4.6
+      - uses: amannn/action-semantic-pull-request@7bfb19c48fc334d3dacb072cf982e81535041209 # v3.4.6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.github/workflows/release-manual.yml b/.github/workflows/release-manual.yml
index 138fa84..54df7b7 100644
--- a/.github/workflows/release-manual.yml
+++ b/.github/workflows/release-manual.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           fetch-depth: 0
           token: ${{ secrets.RELEASE_TOKEN }}
@@ -46,12 +46,12 @@ jobs:
           git commit -m "Bump microservice chart version ${{ inputs.version }}"
           git push -u origin ${{ github.ref_name }}
 
-      - uses: azure/setup-helm@v3
+      - uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
             version: '3.12.0'
         id: install_helm
 
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.5.0
+        uses: helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968 # v1.5.0
         env:
           CR_TOKEN: "${{ secrets.RELEASE_TOKEN }}"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 42da9e9..fccc180 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           fetch-depth: 0
           token: ${{ secrets.RELEASE_TOKEN }}
@@ -64,6 +64,6 @@ jobs:
 
       - name: Run chart-releaser
         if: steps.semantic.outputs.new_release_published == 'true'
-        uses: helm/chart-releaser-action@v1.4.0
+        uses: helm/chart-releaser-action@a3454e46a6f5ac4811069a381e646961dda2e1bf # v1.4.0
         env:
           CR_TOKEN: "${{ secrets.RELEASE_TOKEN }}"