Merge pull request #17 from step-security-bot/chore/GHA-150751-stepsecurity-remediation

[StepSecurity] ci: Harden GitHub Actions

Author: amanstep

install/ampel/action.yml

@@ -65,7 +65,7 @@ runs:
         fi
       shell: bash
 
-    - uses: step-security/carabiner-dev-actions/install/download-and-verify@main
+    - uses: step-security/carabiner-dev-actions/install/download-and-verify@a8f42741cb08eaf075df9480b083b229b6927162 # main
       with:
         tool: ampel
         version: ${{ inputs.version }}

install/bnd/action.yml

@@ -65,7 +65,7 @@ runs:
         fi
       shell: bash
 
-    - uses: step-security/carabiner-dev-actions/install/download-and-verify@main
+    - uses: step-security/carabiner-dev-actions/install/download-and-verify@a8f42741cb08eaf075df9480b083b229b6927162 # main
       with:
         tool: bnd
         version: ${{ inputs.version }}

install/download-and-verify/action.yml

@@ -118,7 +118,7 @@ runs:
 
       - name: Bootstrap trusted ampel
         if: inputs.verify == 'true'
-        uses: step-security/carabiner-dev-actions/install/ampel-bootstrap@main
+        uses: step-security/carabiner-dev-actions/install/ampel-bootstrap@a8f42741cb08eaf075df9480b083b229b6927162 # main
         id: bootstrap
 
       - name: Detect platform