chore(deps): pin dependencies (#1498)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

.github/workflows/apps.release.yaml

@@ -15,14 +15,14 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:v2.2.1
     steps:
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         name: Checkout
         with:
           fetch-depth: 100
           token: ${{ secrets.BOT_TOKEN }}
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         with:
           repository: truecharts/catalog
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/apps.test.yaml

@@ -21,7 +21,7 @@ jobs:
       empty_matrix: ${{ steps.reduce.outputs.empty_matrix }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
     - uses: dorny/paths-filter@v2
       id: filter
       with:
@@ -61,13 +61,13 @@ jobs:
     ##
       - name: Checkout
         if: ${{ matrix.app != '.gitkee' }}
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         with:
           fetch-depth: 0
 
       - name: Cache helm repo cache
         id: cache
-        uses: actions/cache@v2
+        uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2
         with:
           key: helmrepocache-${{ github.sha }}
           path: |
@@ -106,7 +106,7 @@ jobs:
 
       - name: Install Helm
         if: ${{ matrix.app != '.gitkee' }}
-        uses: azure/setup-helm@v1
+        uses: azure/setup-helm@18bc76811624f360dbd7f18c2d4ecb32c7b87bab # renovate: tag=v1
         with:
           version: v3.7.1
 
@@ -119,14 +119,14 @@ jobs:
           helm repo add prometheus https://prometheus-community.github.io/helm-charts
           helm repo update
 
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@f38219332975fe8f9c04cca981d674bf22aea1d3 # renovate: tag=v2
         if: ${{ matrix.app != '.gitkee' }}
         with:
           python-version: 3.7
 
       - name: Set up chart-testing
         if: ${{ matrix.app != '.gitkee' }}
-        uses: helm/chart-testing-action@v2.1.0
+        uses: helm/chart-testing-action@5f16c27cf7a4fa9c776ff73734df3909b2b65127 # renovate: tag=v2.1.0
 
     ##
     # Chart-Testing Section
@@ -163,20 +163,20 @@ jobs:
     steps:
       - name: Cache helm repo cache
         id: cache
-        uses: actions/cache@v2
+        uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2
         with:
           key: helmrepocache-${{ github.sha }}
           path: |
             ~/.cache/helm/repository
             ~/.config/helm/repositories.yaml
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         name: Checkout
         with:
           fetch-depth: 100
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         with:
           repository: truecharts/catalog
           path: catalog

.github/workflows/common.test.yaml

@@ -22,14 +22,14 @@ jobs:
     steps:
       - name: Cache helm repo cache
         id: cache
-        uses: actions/cache@v2
+        uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2
         with:
           key: helmrepocache-${{ github.sha }}
           path: |
             ~/.cache/helm/repository
             ~/.config/helm/repositories.yaml
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         name: Checkout
         with:
           fetch-depth: 100
@@ -57,21 +57,21 @@ jobs:
     steps:
       - name: Cache helm repo cache
         id: cache
-        uses: actions/cache@v2
+        uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2
         with:
           key: helmrepocache-${{ github.sha }}
           path: |
             ~/.cache/helm/repository
             ~/.config/helm/repositories.yaml
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         name: Checkout
         with:
           fetch-depth: 100
 
       - name: Install Helm
         if: ${{ matrix.app != '.gitkee' }}
-        uses: azure/setup-helm@v1
+        uses: azure/setup-helm@18bc76811624f360dbd7f18c2d4ecb32c7b87bab # renovate: tag=v1
         with:
           version: v3.7.1
 
@@ -83,19 +83,19 @@ jobs:
           helm repo add prometheus https://prometheus-community.github.io/helm-charts
           helm repo update
 
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@f38219332975fe8f9c04cca981d674bf22aea1d3 # renovate: tag=v2
         if: ${{ matrix.app != '.gitkee' }}
         with:
           python-version: 3.7
 
       - name: Set up chart-testing
         if: ${{ matrix.app != '.gitkee' }}
-        uses: helm/chart-testing-action@v2.1.0
+        uses: helm/chart-testing-action@5f16c27cf7a4fa9c776ff73734df3909b2b65127 # renovate: tag=v2.1.0
     ##
     # Chart-Testing Section
     ##
 
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@f38219332975fe8f9c04cca981d674bf22aea1d3 # renovate: tag=v2
         if: ${{ matrix.app != '.gitkee' }}
         with:
           python-version: 3.7

.github/workflows/docs.deploy.yaml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

.github/workflows/general.security-scan.yaml

@@ -17,7 +17,7 @@ jobs:
     outputs:
       dir: ${{ steps.set-dirs.outputs.dir }} # generate output name dir by using inner step output
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - id: set-dirs # Give it an id to handle to get step outputs in the outputs key above
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
 
     - name: Run Trivy vulnerability scanner in repo mode
       uses: aquasecurity/trivy-action@master
@@ -58,7 +58,7 @@ jobs:
       fail-fast: false
     steps:
     - name: Container Security scan
-      uses: Azure/container-scan@v0
+      uses: Azure/container-scan@595707a78db6069af4db7d81902d7a886ec73973 # renovate: tag=v0
       with:
         image-name: ghcr.io/${{ github.repository_owner }}/${{matrix.dir}}:latest
         severity-threshold: HIGH

.github/workflows/prune.yaml

@@ -9,9 +9,9 @@ jobs:
     name: "prune old releases"
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
       with:
         fetch-depth: 0
-    - uses: actions/delete-package-versions@v2
+    - uses: actions/delete-package-versions@fc4c9fe9124691791f1856863589939fd5a1c071 # renovate: tag=v2
       with:
         min-versions-to-keep: 200

.github/workflows/renovate-bump.yaml

@@ -12,12 +12,12 @@ jobs:
     name: Get changed Apps
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
         name: Checkout
         with:
           fetch-depth: 0