pin sha to actions/checkout

Signed-off-by: dartcafe <[email protected]>

Author: dartcafe

.github/workflows/codeql-analysis.yml

@@ -28,7 +28,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/[email protected].2
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v4
       with:

.github/workflows/nodejs.yml

@@ -17,8 +17,7 @@ jobs:
     name: Build app
     steps:
       - name: Checkout repository
-        uses: actions/[email protected]
-
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Setup node
         uses: ./.github/actions/setup-node
         with:

.github/workflows/publish_alpha.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Alpha release
     steps:
-    - uses: actions/[email protected].2
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Check correct app version
       id: appinfo
       uses: ./.github/actions/get-polls-version

.github/workflows/publish_beta.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Beta release
     steps:
-    - uses: actions/[email protected].2
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Check correct app version
       id: appinfo
       uses: ./.github/actions/get-polls-version

.github/workflows/publish_release.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Release
     steps:
-    - uses: actions/[email protected].2
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Check correct app version
       id: appinfo
       uses: ./.github/actions/get-polls-version