Pin dependencies

.github/workflows/deploy.yml

@@ -14,7 +14,7 @@ jobs:
           go-version: '>=1.23.4'
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6
+        uses: golangci/golangci-lint-action@ec5d18412c0aeab7936cb16880d708ba2a64e1ae # v6
         with:
           version: latest
 
@@ -126,19 +126,19 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-    - uses: hashicorp/setup-terraform@v3
+    - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
       with:
         terraform_version: 1.5.7
 
     - name: lint
       run: terraform fmt **/*.tf
 
-    - uses: google-github-actions/setup-gcloud@v2
+    - uses: google-github-actions/setup-gcloud@6189d56e4096ee891640bb02ac264be376592d6a # v2
       with:
         version: 'latest'
 
     - id: 'auth'
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v2
       with:
         workload_identity_provider: ${{ secrets.GCLOUD_OIDC_POOL }}
         service_account: ${{ secrets.GSA }}
@@ -149,7 +149,7 @@ jobs:
         gcloud config set project ${{ secrets.GCLOUD_PROJECT }}
         gcloud config set disable_prompts true
 
-    - uses: 'docker/login-action@v3'
+    - uses: 'docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567' # v3
       name: 'Docker login'
       with:
         registry: 'us-docker.pkg.dev'
@@ -164,7 +164,7 @@ jobs:
 
     - name: Upload logs as artifacts
       if: ${{ always() }}
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
       with:
         name: terraform.log
         path: /tmp/terraform.log