feat: Safer Bots [using commit hash]

.github/workflows/BumpVersion.yml

@@ -16,7 +16,7 @@ jobs:
 
       # Checkout the MaCh3 repository
       - name: Checkout MaCh3 repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           repository: mach3-software/MaCh3
           path: MaCh3

.github/workflows/CDImage.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - name: Log in to GitHub Container Registry
       run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
@@ -49,7 +49,7 @@ jobs:
         fi
 
     - name: Delete old images
-      uses: actions/delete-package-versions@v5
+      uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55  # v5.0.0
       with:
         package-name: 'mach3tutorial'
         package-type: 'container'

.github/workflows/CIBenchmark.yml

@@ -57,7 +57,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Install gperftools
         run: |

.github/workflows/CIPythonValidations.yml

@@ -21,7 +21,7 @@ jobs:
       image: ghcr.io/mach3-software/mach3:alma9v1.3.0
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - name: Get MaCh3 Validations
       env:

.github/workflows/CIValidations.yml

@@ -49,7 +49,7 @@ jobs:
       image: ghcr.io/mach3-software/mach3:alma9v1.3.0
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - name: Get MaCh3 Validations
       run: |

.github/workflows/CodeQL.yml

@@ -19,10 +19,10 @@ jobs:
       contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@0337b99474cc604cc1c4737c1b419e6fb618172e  # v4.36.2
         with:
           languages: c-cpp
           build: none  # Specify build none to skip any build steps
@@ -35,4 +35,4 @@ jobs:
           make
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@0337b99474cc604cc1c4737c1b419e6fb618172e  # v4.36.2

.github/workflows/Greetings.yml

@@ -9,7 +9,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-    - uses: actions/first-interaction@v3
+    - uses: actions/first-interaction@1c4688942c71f71d4f5502a26ea67c331730fa4d  # v3.1.0
       with:
         repo_token: ${{ secrets.GITHUB_TOKEN }}
         issue_message: "This is your first issue, thank you for contributing to MaCh3!"

.github/workflows/Label.yml

@@ -17,6 +17,6 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/labeler@v6
+    - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b  # v6.0.1
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/Linter.yml

@@ -12,12 +12,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: 0
 
       - name: Run Super Linter
-        uses: github/super-linter@v7
+        uses: super-linter/super-linter@12150456a73e248bdc94d0794898f94e23127c88  # v7.4.0
         env:
           VALIDATE_MARKDOWN: true  # Enable Markdown linting
           VALIDATE_DOCKERFILE: true  # Enable Dockerfile linting
@@ -29,7 +29,7 @@ jobs:
           DISABLE_LINTERS: "CPP"  # Disable linting for other languages
 
       - name: Run ReviewDog with yamlint
-        uses: reviewdog/action-yamllint@v1
+        uses: reviewdog/action-yamllint@f01d8a48fd8d89f89895499fca2cff09f9e9e8c0  # v1.21.0
         with:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review # Change reporter.

.github/workflows/Squash.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Squash commits
         uses: mach3-software/MaCh3/.github/actions/squash@v2.5.1

.github/workflows/Stale.yml

@@ -18,7 +18,7 @@ jobs:
       pull-requests: write
 
     steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f  # v10.2.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-issue-message: 'Stale issue message'