update all actions pin (#105)

.github/workflows/release-digital-ocean.yml

@@ -17,16 +17,16 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout repo
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
 
       - name: Login to Azure - CI Subscription
-        uses: Azure/login@ec3c14589bd3e9312b3cc8c41e6860e258df9010
+        uses: Azure/login@1f63701bf3e6892515f1b7ce2d2bf1708b46beaf # v1.4.3
         with:
           creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
 
       - name: Retrieve secrets
         id: retrieve-secrets
-        uses: bitwarden/gh-actions/get-keyvault-secrets@c3b3285993151c5af47cefcb3b9134c28ab479af
+        uses: bitwarden/gh-actions/get-keyvault-secrets@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           keyvault: "bitwarden-ci"
           secrets: "digital-ocean-api-key"
@@ -49,7 +49,7 @@ jobs:
           packer build marketplace-image.json
 
       - name: Set up Homebrew
-        uses: Homebrew/actions/setup-homebrew@bf8757bc21b0cba89461f996ff351821727cf53d
+        uses: Homebrew/actions/setup-homebrew@bf8757bc21b0cba89461f996ff351821727cf53d # v1.0.0 NB: does not have an official release yet
 
       - name: Digital Ocean Image Cleanup
         env:

.github/workflows/release-web-latest.yml

@@ -32,7 +32,7 @@ jobs:
       ########## DockerHub ##########
       - name: Setup DCT
         id: setup-dct
-        uses: bitwarden/gh-actions/setup-docker-trust@a8c384a05a974c05c48374c818b004be221d43ff
+        uses: bitwarden/gh-actions/setup-docker-trust@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           azure-creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
           azure-keyvault-name: "bitwarden-ci"

.github/workflows/release.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Get Latest Self-Host Version
         id: get-self-host
-        uses: bitwarden/gh-actions/get-release-version@664c8899c95490c65dac0df11519d24ed8419c85
+        uses: bitwarden/gh-actions/get-release-version@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           repository: bitwarden/self-host
 
@@ -98,7 +98,7 @@ jobs:
 
       - name: Retrieve secrets
         id: retrieve-secrets
-        uses: bitwarden/gh-actions/get-keyvault-secrets@c3b3285993151c5af47cefcb3b9134c28ab479af
+        uses: bitwarden/gh-actions/get-keyvault-secrets@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           keyvault: "bitwarden-ci"
           secrets: "aws-selfhost-version-access-id,
@@ -190,7 +190,7 @@ jobs:
       ########## DockerHub ##########
       - name: Setup DCT
         id: setup-dct
-        uses: bitwarden/gh-actions/setup-docker-trust@a8c384a05a974c05c48374c818b004be221d43ff
+        uses: bitwarden/gh-actions/setup-docker-trust@82bfda66185116020992660f6c73aa53277d081d
         with:
           azure-creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
           azure-keyvault-name: "bitwarden-ci"

.github/workflows/update-links.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Login to Azure - CI Subscription
-        uses: Azure/login@77f1b2e3fb80c0e8645114159d17008b8a2e475a
+        uses: Azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2 # v1.4.6
         with:
           creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
 
@@ -44,7 +44,7 @@ jobs:
           fi
 
       - name: Update Bitwarden Script PowerShell Link
-        uses: bitwarden/gh-actions/update-rebrandly-link@340a677ffb0c53e50ca67cd2c12044cd7f7fc725
+        uses: bitwarden/gh-actions/update-rebrandly-link@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }}
           domain: "go.btwrdn.co"
@@ -52,7 +52,7 @@ jobs:
           destination: "https://github.com/bitwarden/self-host/releases/download/${{ steps.tag-name.outputs.value }}/bitwarden.ps1"
 
       - name: Update Run Script PowerShell Link
-        uses: bitwarden/gh-actions/update-rebrandly-link@340a677ffb0c53e50ca67cd2c12044cd7f7fc725
+        uses: bitwarden/gh-actions/update-rebrandly-link@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }}
           domain: "go.btwrdn.co"
@@ -60,7 +60,7 @@ jobs:
           destination: "https://github.com/bitwarden/self-host/releases/download/${{ steps.tag-name.outputs.value }}/run.ps1"
 
       - name: Update Bitwarden Script Shell Link
-        uses: bitwarden/gh-actions/update-rebrandly-link@340a677ffb0c53e50ca67cd2c12044cd7f7fc725
+        uses: bitwarden/gh-actions/update-rebrandly-link@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }}
           domain: "go.btwrdn.co"
@@ -68,7 +68,7 @@ jobs:
           destination: "https://github.com/bitwarden/self-host/releases/download/${{ steps.tag-name.outputs.value }}/bitwarden.sh"
 
       - name: Update Run Script Shell Link
-        uses: bitwarden/gh-actions/update-rebrandly-link@340a677ffb0c53e50ca67cd2c12044cd7f7fc725
+        uses: bitwarden/gh-actions/update-rebrandly-link@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }}
           domain: "go.btwrdn.co"

.github/workflows/update-versions.yml

@@ -20,11 +20,11 @@ jobs:
 
     steps:
       - name: Checkout Branch
-        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
 
       - name: Get Latest Core Version
         id: get-core
-        uses: bitwarden/gh-actions/get-release-version@d6bd975229dec58f8394b4bfdfc461206ac8e62a
+        uses: bitwarden/gh-actions/get-release-version@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           repository: bitwarden/server
           trim: true
@@ -46,7 +46,7 @@ jobs:
 
       - name: Get Latest Web Version
         id: get-web
-        uses: bitwarden/gh-actions/get-release-version@d6bd975229dec58f8394b4bfdfc461206ac8e62a
+        uses: bitwarden/gh-actions/get-release-version@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           repository: bitwarden/clients
           monorepo: true
@@ -70,7 +70,7 @@ jobs:
 
       - name: Get Latest Key Connector Version
         id: get-key-connector
-        uses: bitwarden/gh-actions/get-release-version@d6bd975229dec58f8394b4bfdfc461206ac8e62a
+        uses: bitwarden/gh-actions/get-release-version@34ecb67b2a357795dc893549df0795e7383ff50f
         with:
           repository: bitwarden/key-connector
           trim: true
@@ -101,7 +101,7 @@ jobs:
     needs: setup
     steps:
       - name: Checkout Branch
-        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
 
       - name: Create Update Versions Branch
         run: |
@@ -109,7 +109,7 @@ jobs:
           git push -u origin update-versions
 
       - name: Checkout Update Versions Branch
-        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
         with:
           ref: update-versions