Use ratchet to pin all our action usage references.

Author: billnapier

.github/workflows/markdown_format.yml

@@ -10,6 +10,6 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: 'Checkout Code'
-        uses: 'actions/checkout@v4'
+        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
       - name: 'Check Markdown Format'
         run: 'tools/mdformat --check --wrap 100 .'

.github/workflows/publish_docs.yml

@@ -15,16 +15,16 @@ jobs:
     name: "Build and Deploy Docs"
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
       - name: 'Generate HTML from Markdown'
-        uses: 'ldeluigi/markdown-docs@latest'
+        uses: 'ldeluigi/markdown-docs@e51f9a21070db6a21dfbe27ac92f065823e006a1' # ratchet:ldeluigi/markdown-docs@latest
         with:
           src: 'docs'
           dst: 'generated-pages'
       - name: 'Install rsync'
         run: 'apt-get update && apt-get install -y rsync'
       - name: 'Deploy Docs'
-        uses: JamesIves/github-pages-deploy-action@v4
+        uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # ratchet:JamesIves/github-pages-deploy-action@v4
         with:
           folder: generated-pages
           force: false

.github/workflows/publish_docs_preview.yml

@@ -14,13 +14,13 @@ jobs:
     name: "Build PR Preview Docs"
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
       - name: 'Generate HTML from Markdown'
-        uses: 'ldeluigi/markdown-docs@latest'
+        uses: 'ldeluigi/markdown-docs@e51f9a21070db6a21dfbe27ac92f065823e006a1' # ratchet:ldeluigi/markdown-docs@latest
         with:
           src: 'docs'
           dst: 'generated-pages'
       - name: 'Deploy GitHub Pages Preview'
-        uses: rossjrw/pr-preview-action@v1
+        uses: rossjrw/pr-preview-action@df22037db54ab6ee34d3c1e2b8810ac040a530c6 # ratchet:rossjrw/pr-preview-action@v1
         with:
           source-dir: './generated-pages/'

.github/workflows/yaml_format.yml

@@ -11,6 +11,6 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: 'Checkout Code'
-        uses: 'actions/checkout@v4'
+        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
       - name: 'Check Yaml Format'
         run: 'tools/yamlfmt --lint .'

tools/ratchet

@@ -0,0 +1,2 @@
+#!/bin/sh
+docker run -it --rm -v "${PWD}:${PWD}" -w "${PWD}" ghcr.io/sethvargo/ratchet:latest $*