chore(deps): add version comments

Author: AmosHuKe

.github/workflows/cicd-security-analysis.yaml

@@ -24,12 +24,12 @@ jobs:
     outputs:
       matrix: ${{ steps.parse-config.outputs.matrix }}
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           persist-credentials: false
 
       - name: Pre-cache zizmor
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0
         id: pre-cache-zizmor
         with:
           path: ~/.cargo/bin/zizmor
@@ -74,18 +74,19 @@ jobs:
     strategy:
       matrix:
         repo: ${{ fromJSON(needs.setup.outputs.matrix) }}
+      max-parallel: 10
       fail-fast: false
     name: "Scan :: ${{ matrix.repo.name }}"
 
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           persist-credentials: false
           fetch-depth: 1
           sparse-checkout: |
             cicd-security-analysis-zizmor-config.yaml
       - name: "Checkout :: ${{ matrix.repo.name }}"
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           persist-credentials: false
           repository: ${{ matrix.repo.name }}
@@ -96,14 +97,14 @@ jobs:
             action.yml
 
       - name: Restore zizmor cache
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0
         id: restore-zizmor
         with:
           path: ~/.cargo/bin/zizmor
           key: ${{ runner.os }}-zizmor-v${{ env.ZIZMOR_VERSION }}
 
       - name: "Scan :: ${{ matrix.repo.name }}"
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #v9.0.0
         env:
           # uses: zizmor online mode
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}