fix: Pin GitHub Actions to commit SHAs

[PrekshithD-Microsoft]

This pull request updates the GitHub Actions workflow files to pin all third-party action dependencies to specific commit SHAs, rather than relying on version tags. This enhances the security and reliability of the CI/CD pipelines by ensuring that workflows always use the exact same version of each action, preventing unexpected changes from upstream updates.

The most important changes are:

Security and Reliability Improvements:

• All usages of third-party GitHub Actions (such as actions/checkout, docker/build-push-action, azure/login, etc.) in workflow files are now pinned to specific commit SHAs instead of version tags, reducing the risk of supply chain attacks and unexpected behavior from upstream changes. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31]

Workflow Consistency:

• Ensured consistent pinning across all workflow files, including those for Docker builds, deployment, code quality checks, and template validation, which improves maintainability and auditability of the CI/CD process. [1] [2] [3] [4] [5] [6]

Tooling and Dependency Management:

• Updated actions for Docker, Azure, and Python setup to use SHA-pinned versions, ensuring that builds and deployments use the intended versions of these tools. [1] [2] [3] [4] [5]

These changes collectively harden the CI/CD pipeline against supply chain vulnerabilities and make it easier to track and audit the exact versions of all automation dependencies.## Purpose

• ...

Does this introduce a breaking change?

• Yes
• No

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	3832	552	85%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
835	0 💤	0 ❌	0 🔥	11.272s ⏱️