Merge pull request #117 from step-security-bot/stepsecurity_remediation_1737344280

[StepSecurity] ci: Harden GitHub Actions

Author: hsbt

.github/workflows/build.yml

@@ -43,14 +43,14 @@ jobs:
       debug_suffix: ${{ matrix.debug_suffix }}
 
     steps:
-    - uses: actions/checkout@v4.1.0
+    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
-    - uses: docker/login-action@v3
+    - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
       with:
         username: ${{ secrets.DOCKER_USER }}
         password: ${{ secrets.DOCKER_PASS }}
 
-    - uses: docker/login-action@v3
+    - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
       with:
         registry: ghcr.io
         username: ${{ secrets.GHCR_USER }}
@@ -99,7 +99,7 @@ jobs:
           docker push ghcr.io/ruby/ruby:$tag
         done
 
-    - uses: ruby/action-slack@v3.2.2
+    - uses: ruby/action-slack@54175162371f1f7c8eb94d7c8644ee2479fcd375 # v3.2.2
       with:
         payload: |
           {
@@ -127,15 +127,15 @@ jobs:
     needs: build
 
     steps:
-    - uses: actions/checkout@v4.1.0
+    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
-    - uses: docker/login-action@v3
+    - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
       with:
         username: ${{ secrets.DOCKER_USER }}
         password: ${{ secrets.DOCKER_PASS }}
       if: ${{ matrix.registry_name == 'rubylang' }}
 
-    - uses: docker/login-action@v3
+    - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
       with:
         registry: ghcr.io
         username: ${{ secrets.GHCR_USER }}
@@ -160,7 +160,7 @@ jobs:
              ubuntu_version="${{ matrix.ubuntu_version }}" \
              image_version_suffix=${{ matrix.image_version_suffix }}
 
-    - uses: ruby/action-slack@v3.2.2
+    - uses: ruby/action-slack@54175162371f1f7c8eb94d7c8644ee2479fcd375 # v3.2.2
       with:
         payload: |
           {

.github/workflows/test.yml

@@ -24,7 +24,7 @@ jobs:
           - arm64
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Build image
         run: |