chore(deps): pin dependencies

.github/workflows/auto-release-on-master.yml

@@ -16,7 +16,7 @@ jobs:
 
       - name: Bump version and push tag
         id: bump-version
-        uses: ietf-tools/semver-action@v1
+        uses: ietf-tools/semver-action@2415a9e79db34eb828a8dc1d20d4890725737227 # v1
         with:
           token: ${{ github.token }}
           branch: master
@@ -25,7 +25,7 @@ jobs:
 
       - name: create bosh release
         id: create-bosh-release
-        uses: orange-cloudfoundry/[email protected]
+        uses: orange-cloudfoundry/create-bosh-release-action@5193049587144e6a0eae076feef0d4270843068b # v1.0.1
         with:
           target_branch: ${{github.ref_name}}
           tag_name: ${{ steps.bump-version.outputs.next}}

.github/workflows/on-PRs-commits.yml

@@ -46,7 +46,7 @@ jobs:
       # and if clause https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsif
       - name: create bosh dev release
         id: create-bosh-release
-        uses: orange-cloudfoundry/[email protected] # will create dev release when pushed git ref is not a tag
+        uses: orange-cloudfoundry/create-bosh-release-action@5193049587144e6a0eae076feef0d4270843068b # v1.0.1 # will create dev release when pushed git ref is not a tag
         with:
           target_branch: ${{github.ref_name}}
         env: