Pin dependencies

.github/workflows/push.yml

@@ -12,13 +12,13 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-java@v5
+      - uses: actions/checkout@v5.1.0
+      - uses: actions/setup-java@v5.7.0
         with:
           java-version: 21.0.7+9
           distribution: liberica
       - name: Cache Maven dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@v5.1.0
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -27,7 +27,7 @@ jobs:
             ${{ runner.os }}-maven-
             ${{ runner.os }}-
       - run: mvn verify
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v5.0.0
         with:
           path: target/*.jar
       - name: Sonar Scan
@@ -47,39 +47,39 @@ jobs:
                   -Dsonar.token=${SONAR_TOKEN}
   docker-lint:
     needs: [maven-verify]
-    uses: entur/gha-docker/.github/workflows/lint.yml@v1
+    uses: entur/gha-docker/.github/workflows/lint.yml@v1.11.0
     with:
      ignore: "DL3018"
 
   docker-build:
     needs: [maven-verify]
-    uses: entur/gha-docker/.github/workflows/build.yml@v1
+    uses: entur/gha-docker/.github/workflows/build.yml@v1.11.0
     with:
       build_artifact_name: artifact
       build_artifact_path: target
   docker-push:
     if: github.repository_owner == 'entur' && github.event_name == 'push'
     needs: [docker-build]
-    uses: entur/gha-docker/.github/workflows/push.yml@v1
+    uses: entur/gha-docker/.github/workflows/push.yml@v1.11.0
 
   docker-scan:
     needs: [ docker-build ]
-    uses: entur/gha-security/.github/workflows/docker-scan.yml@v2
+    uses: entur/gha-security/.github/workflows/docker-scan.yml@v2.15.1
     with:
       image_artifact: ${{ needs.docker-build.outputs.image_artifact }}
 
   helm-lint:
-    uses: entur/gha-helm/.github/workflows/lint.yml@v1
+    uses: entur/gha-helm/.github/workflows/lint.yml@v1.6.1
     with:
       environment: dev
 
   terraform-lint:
-    uses: entur/gha-terraform/.github/workflows/lint.yml@v2
+    uses: entur/gha-terraform/.github/workflows/lint.yml@v2.3.1
 
   deploy-dev:
     if: ${{ !cancelled() && !contains(needs.*.result, 'failure') && github.ref == 'refs/heads/master' }}
     needs: [ helm-lint, docker-push, docker-lint ]
-    uses: entur/gha-helm/.github/workflows/deploy.yml@v1
+    uses: entur/gha-helm/.github/workflows/deploy.yml@v1.6.1
     with:
       environment: dev
       image: ${{ needs.docker-push.outputs.image_name }}:${{ needs.docker-push.outputs.image_tag}}
@@ -103,7 +103,7 @@ jobs:
   deploy-tst:
     if: ${{ !cancelled() && !contains(needs.*.result, 'failure') && github.ref == 'refs/heads/master' }}
     needs: [ approval-tst, docker-push, docker-lint ]
-    uses: entur/gha-helm/.github/workflows/deploy.yml@v1
+    uses: entur/gha-helm/.github/workflows/deploy.yml@v1.6.1
     with:
       environment: tst
       image: ${{ needs.docker-push.outputs.image_name }}:${{ needs.docker-push.outputs.image_tag}}
@@ -127,7 +127,7 @@ jobs:
   deploy-prd:
     if: ${{ !cancelled() && !contains(needs.*.result, 'failure') && github.ref == 'refs/heads/master' }}
     needs: [ approval-prd, docker-push, docker-lint ]
-    uses: entur/gha-helm/.github/workflows/deploy.yml@v1
+    uses: entur/gha-helm/.github/workflows/deploy.yml@v1.6.1
     with:
       environment: prd
       image: ${{ needs.docker-push.outputs.image_name }}:${{ needs.docker-push.outputs.image_tag}}