Pin dependencies

.github/workflows/release_deploy.yml

@@ -97,7 +97,7 @@ jobs:
     steps:
       - name: Make Release
         id: release
-        uses: pagopa/github-actions-template/[email protected]
+        uses: pagopa/github-actions-template/maven-release@d91a1fd0b913c9830589be5d86cdb71c90813fae # v1.5.4
         with:
           semver: ${{ needs.setup.outputs.semver }}
           github_token: ${{ secrets.BOT_TOKEN_GITHUB }}
@@ -111,20 +111,20 @@ jobs:
     if: ${{ inputs.semver != 'skip' }}
     environment: ${{ inputs.environment }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           ref: ${{ needs.release.outputs.version }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Docker meta
         id: meta
-        uses: docker/[email protected]
+        uses: docker/metadata-action@507c2f2dc502c992ad446e3d7a5dfbe311567a96 # v4.3.0
         with:
           images: ghcr.io/${{ github.repository }}
           tags: |
@@ -134,7 +134,7 @@ jobs:
             type=sha
 
       - name: Build and push
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3
         with:
           context: .
           push: true
@@ -150,17 +150,17 @@ jobs:
     if: ${{ always() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled') }}
     steps:
       - name: 'Checkout GitHub Action'
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: 'Login via Azure CLI'
-        uses: azure/login@v1
+        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1
         with:
           client-id: ${{ secrets.CLIENT_ID }}
           tenant-id: ${{ secrets.TENANT_ID }}
           subscription-id: ${{ secrets.SUBSCRIPTION_ID }}
 
       - name: 'Azure CLI script: start staging slot'
-        uses: azure/CLI@v1
+        uses: azure/CLI@4db43908b9df2e7ac93c8275a8f9a448c59338dd # v1
         if: ${{ contains(github.event.inputs.environment, 'prod') }}
         env:
           ENV_SHORT: ${{ (contains(github.event.inputs.environment,'prod') && 'p') }}
@@ -169,7 +169,7 @@ jobs:
             az functionapp start --name pagopa-${{ env.ENV_SHORT }}-weu-fn-gpd-analysis --resource-group pagopa-${{ env.ENV_SHORT }}-weu-gps-gpd-rg --slot staging
 
       - name: 'Run Azure Functions Container Action DEV|UAT: deploy on production slot'
-        uses: Azure/[email protected]
+        uses: Azure/functions-container-action@0aec6197033a72d3ca813f1aebd9391f639c2a8f # v1.2.1
         if: ${{ contains(github.event.inputs.environment, 'dev') || contains(github.event.inputs.environment, 'uat') }}
         env:
           ENV_SHORT: ${{ (contains(github.event.inputs.environment,'dev') && 'd') || (contains(github.event.inputs.environment, 'uat') && 'u') }}
@@ -180,7 +180,7 @@ jobs:
           slot-name: production
 
       - name: 'Run Azure Functions Container Action PROD: deploy on staging slot'
-        uses: Azure/[email protected]
+        uses: Azure/functions-container-action@0aec6197033a72d3ca813f1aebd9391f639c2a8f # v1.2.1
         if: ${{ contains(github.event.inputs.environment, 'prod') }}
         env:
           ENV_SHORT: ${{ (contains(github.event.inputs.environment,'prod') && 'p') }}
@@ -191,7 +191,7 @@ jobs:
           slot-name: staging
 
       - name: 'PROD Deploy Approval'
-        uses: trstringer/manual-approval@v1
+        uses: trstringer/manual-approval@662b3ddbc7685f897992051e87e1b4b58c07dc03 # v1
         if: ${{ contains(github.event.inputs.environment, 'prod') }}
         with:
           secret: ${{ secrets.BOT_TOKEN_GITHUB }}
@@ -203,7 +203,7 @@ jobs:
           timeout-minutes: 360
 
       - name: 'Run Azure Functions Container Action PROD: deploy on production slot'
-        uses: Azure/[email protected]
+        uses: Azure/functions-container-action@0aec6197033a72d3ca813f1aebd9391f639c2a8f # v1.2.1
         if: ${{ contains(github.event.inputs.environment, 'prod') }}
         env:
           ENV_SHORT: ${{ (contains(github.event.inputs.environment,'prod') && 'p') }}
@@ -214,7 +214,7 @@ jobs:
           slot-name: production
 
       - name: 'Azure CLI script: stop staging slot'
-        uses: azure/CLI@v1
+        uses: azure/CLI@4db43908b9df2e7ac93c8275a8f9a448c59338dd # v1
         if: ${{ contains(github.event.inputs.environment, 'prod') }}
         env:
           ENV_SHORT: ${{ (contains(github.event.inputs.environment,'prod') && 'p') }}