ci: pin GitHub Actions to commit SHAs

.github/dependabot.yml

@@ -4,3 +4,10 @@ updates:
     directory: "examples/signaling-server-nodejs"
     schedule:
       interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directories:
+      - ".github/workflows"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 15

.github/workflows/build-gnutls.yml

@@ -8,7 +8,7 @@ jobs:
   build-linux:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libgnutls28-dev nettle-dev libsrtp2-dev
     - name: submodules
@@ -22,7 +22,7 @@ jobs:
   build-macos:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: brew install gnutls nettle
     - name: submodules

.github/workflows/build-mbedtls.yml

@@ -8,9 +8,9 @@ jobs:
   build-linux:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: Set up Homebrew
-      uses: Homebrew/actions/setup-homebrew@master
+      uses: Homebrew/actions/setup-homebrew@98cfa07b984a61682e6cd3a0833fad2006cc84ba #master
     - name: Install Mbed TLS
       run: brew update && brew install mbedtls
     - name: submodules
@@ -24,7 +24,7 @@ jobs:
   build-macos:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: Install Mbed TLS
       run: brew update && brew install mbedtls
     - name: submodules

.github/workflows/build-nice.yml

@@ -8,7 +8,7 @@ jobs:
   build-nice:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libgnutls28-dev libnice-dev
     - name: submodules

.github/workflows/build-nomedia.yml

@@ -8,7 +8,7 @@ jobs:
   build-nomedia:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev
     - name: submodules
@@ -22,8 +22,8 @@ jobs:
   build-nomedia-windows:
     runs-on: windows-latest
     steps:
-    - uses: actions/checkout@v2
-    - uses: ilammy/msvc-dev-cmd@v1
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
+    - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 #v1
     - name: install packages
       run: choco install openssl --version=3.1.1
     - name: submodules

.github/workflows/build-nowebsocket.yml

@@ -10,7 +10,7 @@ jobs:
   build-nowebsocket:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev libsrtp2-dev
     - name: submodules

.github/workflows/build-openssl.yml

@@ -8,7 +8,7 @@ jobs:
   build-linux:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev libsrtp2-dev
     - name: submodules
@@ -22,7 +22,7 @@ jobs:
   build-macos:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: HOMEBREW_NO_INSTALL_CLEANUP=1 brew reinstall openssl@1.1
     - name: submodules
@@ -38,8 +38,8 @@ jobs:
   build-windows:
     runs-on: windows-latest
     steps:
-    - uses: actions/checkout@v2
-    - uses: ilammy/msvc-dev-cmd@v1
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
+    - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 #v1
     - name: install packages
       run: choco install openssl --version=3.1.1
     - name: submodules

.github/workflows/check-version.yml

@@ -8,7 +8,7 @@ jobs:
   check-version:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev libsrtp2-dev
     - name: submodules