Merge pull request #40 from step-security/stepsecurity_remediation_1742901381

[StepSecurity] Apply security best practices

Author: Raj-StepSecurity

.github/workflows/test.yml

@@ -43,13 +43,13 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@v2
+        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
         with:
           egress-policy: audit
 
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # v4.2.2
 
-      - uses: 'actions/setup-node@v4'
+      - uses: 'actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e' # v4.3.0
         with:
           node-version: '20.x'
 
@@ -83,13 +83,13 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@v2
+        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
         with:
           egress-policy: audit
 
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # v4.2.2
 
-      - uses: 'actions/setup-node@v4'
+      - uses: 'actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e' # v4.3.0
         with:
           node-version: '20.x'
 
@@ -103,7 +103,7 @@ jobs:
           project_id: '${{ vars.PROJECT_ID }}'
           workload_identity_provider: '${{ vars.WIF_PROVIDER_NAME }}'
 
-      - uses: 'google-github-actions/setup-gcloud@v2'
+      - uses: 'google-github-actions/setup-gcloud@6189d56e4096ee891640bb02ac264be376592d6a' # v2.1.2
         with:
           version: '>= 363.0.0'
 
@@ -128,13 +128,13 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@v2
+        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
         with:
           egress-policy: audit
 
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # v4.2.2
 
-      - uses: 'actions/setup-node@v4'
+      - uses: 'actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e' # v4.3.0
         with:
           node-version: '20.x'
 
@@ -148,6 +148,6 @@ jobs:
           workload_identity_provider: '${{ vars.WIF_PROVIDER_NAME }}'
           service_account: '${{ vars.SERVICE_ACCOUNT_EMAIL }}'
 
-      - uses: 'google-github-actions/setup-gcloud@v2'
+      - uses: 'google-github-actions/setup-gcloud@6189d56e4096ee891640bb02ac264be376592d6a' # v2.1.2
         with:
           version: '>= 363.0.0'