Update release.yml

Author: Ashraf-Khabar

.github/workflows/release.yml

@@ -9,33 +9,34 @@ permissions:
   contents: write
 
 jobs:
-  # JOB 1 : Analyse de code sur Linux (Docker est supporté ici)
+  # JOB 1 : Analyse de code sur Linux (Docker requis)
   sonar-scan:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        # Utilisation du hash SHA pour actions/checkout@v4
+        # SHA pour actions/checkout@v4.1.1
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 
         with:
           fetch-depth: 0 
 
       - name: SonarCloud Scan
-        # Utilisation du hash SHA pour SonarSource/sonarcloud-github-action
-        uses: SonarSource/sonarcloud-github-action@400171a1b051c0595b433390d4da511654e6074a
+        # SHA mis à jour pour SonarSource/sonarcloud-github-action@v3.1.0
+        uses: SonarSource/sonarcloud-github-action@e283307525381a179374092b3f11467464010a30
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.BULK_FOLDER_SCAN }}
 
   # JOB 2 : Build de l'exécutable sur Windows
   build:
-    needs: sonar-scan # Le build ne démarre QUE si le scan Sonar réussit
+    needs: sonar-scan # Sécurité : bloque le build si le scan échoue
     runs-on: windows-latest
     steps:
     - name: Checkout code
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
     - name: Set up Python
-      uses: actions/setup-python@82c3513126846c7546603a12903780360a5d2188
+      # SHA pour actions/setup-python@v5.0.0
+      uses: actions/setup-python@0a5c61591373683505ea898e09a3ee4f39ef2b9c
       with:
         python-version: '3.11'
 
@@ -86,6 +87,7 @@ jobs:
         & "C:\Program Files (x86)\Inno Setup 6\ISCC.exe" /DMyAppVersion=$ver "installer_script.iss"
 
     - name: Create Release
+      # SHA pour softprops/action-gh-release@v1
       uses: softprops/action-gh-release@de2c5731105a9687dd2b1f4021029c29c8e5e8a6
       with:
         tag_name: v${{ steps.get_version.outputs.VERSION }}