Pin this action.

Author: johnbillion

action.yml

@@ -118,7 +118,7 @@ runs:
     - name: Generate attestation for the zip
       if: ${{ inputs.dry-run == 'false' }}
       id: generate-attestation
-      uses: actions/attest-build-provenance@v2
+      uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
       env:
         PLUGIN: ${{ inputs.plugin }}
         VERSION: ${{ inputs.version }}