chore(otterdog): pinning workflows due to blueprint pin-workflows (#…

…348)

* Pinning workflow .github/workflows/codeql-analysis.yml

* Pinning workflow .github/workflows/release.yml

* keep jreleaser tag

Signed-off-by: Thomas Neidhart <[email protected]>

---------

Signed-off-by: Thomas Neidhart <[email protected]>
Co-authored-by: eclipse-otterdog[bot] <158182605+eclipse-otterdog[bot]@users.noreply.github.com>
Co-authored-by: Thomas Neidhart <[email protected]>

.github/workflows/codeql-analysis.yml

@@ -42,21 +42,21 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
-    - uses: actions/setup-java@v3
+    - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
       with:
         distribution: 'temurin'
         java-version: '17'
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@cb6549f9103a3855e5c5084c8f44b706e1b0a83f # v2.27.3
       with:
         languages: java
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@cb6549f9103a3855e5c5084c8f44b706e1b0a83f # v2.27.3
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@cb6549f9103a3855e5c5084c8f44b706e1b0a83f # v2.27.3

.github/workflows/release.yml

@@ -90,7 +90,7 @@ jobs:
       actions: read
       packages: write
       id-token: write
-    uses: jreleaser/release-action/.github/workflows/[email protected]
+    uses: jreleaser/release-action/.github/workflows/[email protected] # ignore: pin
     with:
       project-version: ${{ needs.precheck.outputs.release-version }}
       branch: ${{ github.ref_name }}