chore(deps): pin dependencies

.github/workflows/gcp-container-typical.yml

@@ -86,12 +86,12 @@ jobs:
             fi
 
         - name: Checkout 🛎️
-          uses: actions/checkout@v4
+          uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
         - name: Authenticate with Google 🔑
           if: ${{ inputs.push-to-registry == true }}
           id: auth
-          uses: google-github-actions/auth@v2
+          uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
           with:
             token_format: access_token
             project_id: ${{ inputs.google-project-id }}
@@ -100,15 +100,15 @@ jobs:
 
         - name: Authenticate with Docker 🔑
           if: ${{ inputs.push-to-registry == true }}
-          uses: docker/login-action@v3
+          uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
           with:
             registry: europe-north1-docker.pkg.dev
             username: oauth2accesstoken
             password: ${{ steps.auth.outputs.access_token }}
 
         - name: Docker meta 🏷
           id: meta-ghcr
-          uses: docker/metadata-action@v5
+          uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
           with:
             images: ${{ env.IMAGE_NAME }}
             tags: |
@@ -118,11 +118,11 @@ jobs:
 
         - name: Set up Docker Buildx 🔨
           id: buildx
-          uses: docker/setup-buildx-action@v3
+          uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
         - name: Build and Push Container 🛠
           id: build-and-push
-          uses: docker/build-push-action@v5
+          uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
           with:
             context: ./
             file: ${{ inputs.container-file }}

.github/workflows/tag.yml

@@ -11,6 +11,6 @@ jobs:
     name: Push major-release
     runs-on: ubuntu-latest
     steps:
-      - uses: Actions-R-Us/actions-tagger@latest
+      - uses: Actions-R-Us/actions-tagger@330ddfac760021349fef7ff62b372f2f691c20fb # latest
         with:
           publish_latest_tag: false