[StepSecurity] ci: Harden GitHub Actions

[step-security-bot]

Summary

This pull request is created by StepSecurity at the request of @wneessen. Please merge the Pull Request to incorporate the requested changes. Please tag @wneessen on your message if you have any questions related to the PR.

Security Fixes

Pinned Dependencies

GitHub Action tags and Docker tags are mutable. This poses a security risk. GitHub's Security Hardening guide recommends pinning actions to full length commit.

• GitHub Security Guide
• The Open Source Security Foundation (OpenSSF) Security Guide

Feedback

For bug reports, feature requests, and general feedback; please email [email protected]. To create such PRs, please visit https://app.stepsecurity.io/securerepo.

Signed-off-by: StepSecurity Bot [email protected]

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 95.76%. Comparing base (acf3c58) to head (eb4f53a).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #391      +/-   ##
==========================================
- Coverage   96.87%   95.76%   -1.12%     
==========================================
  Files          28       28              
  Lines        3139     3139              
==========================================
- Hits         3041     3006      -35     
- Misses         68      108      +40     
+ Partials       30       25       -5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.