Refer to external GitHub Actions using commit hash

Author: costas80

.github/workflows/create-release.yml

@@ -13,7 +13,8 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@v4
-      - uses: "ncipollo/release-action@v1.14.0"
+      # Version 1.20.0
+      - uses: "ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b"
         with:
           allowUpdates: true
           omitBodyDuringUpdate: true

.github/workflows/quality.yml

@@ -35,7 +35,8 @@ jobs:
           key: ${{ runner.os }}-m2-${{ secrets.CACHE_VERSION }}-${{ hashFiles('**/pom.xml') }}
           restore-keys: ${{ runner.os }}-m2-${{ secrets.CACHE_VERSION }}
       - name: Generate Maven settings
-        uses: whelk-io/maven-settings-xml-action@v22
+        # Version 22
+        uses: whelk-io/maven-settings-xml-action@v9dc09b23833fa9aa7f27b63db287951856f3433d
         with:
           repositories: >
             [