Merge pull request #10055 from rancher-sandbox/pin-actions-to-sha

Pin GH Actions to commit sha

Author: mook-as

.github/actions/get-token/action.yaml

@@ -19,7 +19,7 @@ runs:
   - id: vault
     name: Read vault secrets
     if: github.repository == 'rancher-sandbox/rancher-desktop'
-    uses: rancher-eio/read-vault-secrets@main
+    uses: rancher-eio/read-vault-secrets@0da85151ad1f19ed7986c41587e45aac1ace74b6 # v3
     with:
       secrets: |
         secret/data/github/repo/${{ github.repository }}/github/app-credentials appId | APP_ID ;

.github/workflows/spelling.yml

@@ -118,7 +118,7 @@ jobs:
       # going read through it all anyway.
       if: always() && env.UPLOAD_SARIF_LIMITED != ''
       continue-on-error: true
-      uses: github/codeql-action/upload-sarif@v4
+      uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4
       with:
         category: check-spelling
         sarif_file: ${{ env.UPLOAD_SARIF_LIMITED }}