SEC-090: Automated trusted workflow pinning (2023-03-14)

.github/workflows/integration_tests.yml

@@ -13,16 +13,16 @@ jobs:
         containers: [1, 2, 3]
     steps:
       - name: Checkout 🛎
-        uses: actions/checkout@v1
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
       - name: Setup Node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
         with:
           node-version: '16'
         # Get the branch name from the commit SHA
       - name: Set branch name
         run: echo "BRANCH=$(git name-rev --name-only $GITHUB_SHA | awk -F / '{print $3}')" >> $GITHUB_ENV
       - name: Run Cypress 🌲
-        uses: cypress-io/github-action@v2
+        uses: cypress-io/github-action@v2 # TSCCR: tsccr: could not find entry for cypress-io/github-action
         with:
           browser: chrome
           headless: true

.github/workflows/sync-staging-branch.yml

@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout 🛎
-        uses: actions/checkout@v2
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
 
       - name: Merge `master` branch
-        uses: everlytic/[email protected]
+        uses: everlytic/[email protected] # TSCCR: tsccr: could not find entry for everlytic/branch-merge
         id: branch-merge
         with:
           github_token: ${{  secrets.GITHUB_TOKEN }}