fix(ci): repoint codeql-action at a SHA that exists

.github/funding.yml

@@ -0,0 +1,4 @@
+# Funding Configuration
+# See: https://docs.github.com/en/repositories/managing-your-repositorys-custom-fields/displaying-a-sponsor-button-in-your-repository
+
+github: metadatastician

.github/workflows/codeql.yml

@@ -35,7 +35,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3
+        uses: github/codeql-action/init@4187e74d05793876e9989daffde9c3e66b4acd07 # v3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -44,6 +44,6 @@ jobs:
           # any of it". See .github/codeql/codeql-config.yml for the full why.
           config-file: ./.github/codeql/codeql-config.yml
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3
+        uses: github/codeql-action/analyze@4187e74d05793876e9989daffde9c3e66b4acd07 # v3
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/container-build.yml

@@ -30,6 +30,7 @@ on:
   workflow_dispatch:
 
 permissions: read-all
+  actions: read
 
 concurrency:
   group: container-build-${{ github.ref }}

.github/workflows/e2e.yml

@@ -26,6 +26,7 @@ on:
   workflow_dispatch:
 
 permissions: read-all
+  actions: read
 
 concurrency:
   group: e2e-${{ github.ref }}

.github/workflows/install-smoke.yml

@@ -23,6 +23,7 @@ on:
   workflow_dispatch:
 
 permissions: read-all
+  actions: read
 
 concurrency:
   group: install-smoke-${{ github.ref }}

.github/workflows/pages.yml

@@ -6,6 +6,7 @@
     branches: [main, master]
   workflow_dispatch:
 permissions:
+  actions: read
   contents: read
   pages: write
   id-token: write

.github/workflows/zig.yml

@@ -24,6 +24,7 @@ on:
   workflow_dispatch:
 
 permissions: read-all
+  actions: read
 
 concurrency:
   group: zig-${{ github.ref }}