Update Snippets 5000 workflow configuration (#12786)

Author: gewarren

.github/workflows/snippets5000.yml

@@ -14,26 +14,35 @@ on:
         default: 'Manual run'
 
 env:
-  DOTNET_VERSION: '9.0.*'
+  DOTNET_VERSION: '11.0.*'
   DOTNET_QUALITY: 'preview'
   DOTNET_DO_INSTALL: 'true' # To install a version of .NET not provided by the runner, set to true
   EnableNuGetPackageRestore: 'True'
 
+permissions:
+  contents: read
+
 jobs:
   snippets-build:
     runs-on: windows-2022
     permissions:
-        statuses: write
+      contents: read
+      statuses: write
 
     steps:
-    # Check out the repository for the PR
-    - name: Check out repository
-      uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b #@v4.1.5
+    # Checkout the repository for the PR
+    - name: Harden Runner
+      uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+      with:
+        egress-policy: audit
+
+    - name: Checkout repository
+      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #@v7.0.0
 
     # Get the latest preview SDK (or sdk not installed by the runner)
-    - name: Set up .NET SDK
+    - name: Set up .NET
       if: ${{ env.DOTNET_DO_INSTALL == 'true' }}
-      uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 #@4.0.0
+      uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 #@5.3.0
       with:
         dotnet-version: ${{ env.DOTNET_VERSION }}
         dotnet-quality: ${{ env.DOTNET_QUALITY }}
@@ -46,7 +55,7 @@ jobs:
     # Clone docs-tools repo
     - name: Clone docs-tools repository
       run: |
-        git clone https://github.com/dotnet/docs-tools
+        git clone --depth 1 https://github.com/dotnet/docs-tools
 
     # Run snippets 5000
     - name: Run snippets 5000 for PR