Pin some github action version hashes

Author: dannystaple

.github/workflows/on_call_build_site.yaml

@@ -31,14 +31,14 @@ jobs:
           tar -czf _site.tar.gz _site
 
       - name: upload site artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: _site
           path: _site.tar.gz
           if-no-files-found: error
 
       - name: upload httpd.conf artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: httpd.conf
           path: _drafts/staging/httpd.conf

.github/workflows/on_call_staging_test.yaml

@@ -8,7 +8,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Fetch site artifact
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: _site
       - name: extract site artifact

.github/workflows/on_push_to_master_test_and_deploy.yaml

@@ -23,20 +23,23 @@ jobs:
     needs: staging_test
     steps:
       - name: Fetch site artifact
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: _site
+
       - name: extract site artifact
         run: |
           tar -xzf _site.tar.gz
+
       - name: Fetch httpd conf artifact
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: httpd.conf
           path: _drafts/staging/httpd.conf
+
       # Sync the files
       - name: Sync the site over
-        uses: burnett01/rsync-deployments@5.2
+        uses: burnett01/rsync-deployments@3cccb6851148e6198ed9ed89eb0d1c17b5e58cc7 # v7.0.2
         with:
           switches: -a
           path: _site/
@@ -55,34 +58,40 @@ jobs:
   deploy_oauth_config:
     runs-on: ubuntu-latest
     steps:
+
       - uses: actions/checkout@v4
-      - uses: dorny/paths-filter@v3
+
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         id: filter
         with:
           filters: |
             workflows:
               - '.github/workflows/**'
+
       # see https://github.com/mcdeck/netlify-cms-oauth-provider-php
       - name: Checkout the netlify-cms-oauth-provider-php
         uses: actions/checkout@v4
         with:
           repository: mcdeck/netlify-cms-oauth-provider-php
           path: netlify-cms-oauth-provider-php
+
       - name: Perform the netlify composer install
         if: steps.filter.outputs.workflows == 'true'
         run: |
           cd netlify-cms-oauth-provider-php
           composer install
+
       - name: Copy over the netlify-cms-oauth-provider-php files
         if: steps.filter.outputs.workflows == 'true'
-        uses: burnett01/rsync-deployments@5.2
+        uses: burnett01/rsync-deployments@3cccb6851148e6198ed9ed89eb0d1c17b5e58cc7 # v7.0.2
         with:
           switches: -a
           path: netlify-cms-oauth-provider-php/
           remote_path: github-oauth2
           remote_host: home738752777.1and1-data.host
           remote_user: ${{ secrets.ORIONROBOTS_DEPLOY_USER }}
           remote_key: ${{ secrets.ORIONROBOTS_DEPLOY_KEY }}
+
       - name: Create the oauth environment file
         if: steps.filter.outputs.workflows == 'true'
         run: |
@@ -91,9 +100,10 @@ jobs:
           echo "REDIRECT_URI=https://github-oauth2.orionrobots.co.uk/callback" >> netlify-cms-oauth-provider-php/.env.local
           echo "ORIGIN=https://orionrobots.co.uk" >> netlify-cms-oauth-provider-php/.env.local
           echo "APP_ENV=prod" >> netlify-cms-oauth-provider-php/.env.local
+
       - name: Copy over the oauth environment file
         if: steps.filter.outputs.workflows == 'true'
-        uses: burnett01/rsync-deployments@5.2
+        uses: burnett01/rsync-deployments@3cccb6851148e6198ed9ed89eb0d1c17b5e58cc7 # v7.0.2
         with:
           switches: -a
           path: netlify-cms-oauth-provider-php/.env.local