Pin dependencies

.github/workflows/anchore.yml

@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the code
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Build the Docker image
         run: docker build . --file ${{ env.DOCKERFILE }} --tag localbuild/testimage:latest

.github/workflows/check_pr.yml

@@ -53,7 +53,7 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4
         with:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '21'
@@ -65,7 +65,7 @@ jobs:
       - name: Print diffs
         run: git --no-pager diff
       - name: suggester / google-java-format
-        uses: reviewdog/action-suggester@v1
+        uses: reviewdog/action-suggester@db4abb16fbaabe386831e5addb7be1485d0d63d3 # v1
         with:
           tool_name: google-java-format
       - name: Check Format

.github/workflows/ci_code_review.yml

@@ -45,7 +45,7 @@ jobs:
           java_version: 17
 
       - name: suggester / junit
-        uses: reviewdog/action-suggester@v1
+        uses: reviewdog/action-suggester@db4abb16fbaabe386831e5addb7be1485d0d63d3 # v1
         with:
           tool_name: junit
 

.github/workflows/update_code.yml

@@ -22,7 +22,7 @@ jobs:
           ref: ${{ github.ref_name}}
           token: ${{ secrets.BOT_TOKEN_GITHUB }}
       - name: Setup JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4
         with:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '21'