Merge pull request #3 from github/notice-and-pin-tags

Add notice and pin action SHA tags

.github/workflows/baseline.yml

@@ -13,6 +13,6 @@ on:
 jobs:
   validate:
     name: Validate Baseline Configuration
-    uses: chrisreddington/reusable-workflows/.github/workflows/baseline-validator.yml@main
+    uses: chrisreddington/reusable-workflows/.github/workflows/baseline-validator.yml@d62f6e0cbe864707a620bba0be92695711514442
     with:
       required-features: "ghcr.io/devcontainers/features/github-cli:1"

.github/workflows/linter.yml

@@ -29,7 +29,7 @@ jobs:
           go-version: "1.23"
 
       - name: Run Super-Linter
-        uses: super-linter/super-linter/slim@v7
+        uses: super-linter/super-linter/slim@b92721f792f381cedc002ecdbb9847a15ece5bb8 # v7.1.0
         env:
           VALIDATE_ALL_CODEBASE: true
           DEFAULT_BRANCH: "main"

.github/workflows/release.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: cli/gh-extension-precompile@v2
+      - uses: cli/gh-extension-precompile@561b19deda1228a0edf856c3325df87416f8c9bd # v2.0.0
         with:
           generate_attestations: true
           go_version_file: go.mod

NOTICE

@@ -0,0 +1,11 @@
+NOTICES
+
+This repository incorporates material as listed below or described in the code.
+
+Mona Sans
+Copyright (c) 2023, GitHub https://github.com/github/mona-sans with Reserved Font Name "Mona Sans"
+
+Deni Anggara <[email protected]>
+GitHub <[email protected]>
+Rosalie Wagner <[email protected]>
+Sebastian Carewe <[email protected]>