Merge pull request #2475 from marquiz/devel/github-actions-versions

github: pin versions of github actions to sha

Author: k8s-ci-robot

.github/workflows/gh-pages.yml

@@ -27,7 +27,7 @@ jobs:
         curl -sfL https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 | bash -s -- --version v3.5.2
 
     - name: Check out repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         fetch-depth: 0
 

.github/workflows/release.yml

@@ -18,12 +18,12 @@ jobs:
       contents: write
     steps:
     - name: Install Helm
-      uses: azure/setup-helm@v5
+      uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
       with:
         version: 3.12.3
 
     - name: Check out repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         fetch-depth: 0