Merge pull request #13 from LuccaSA/security/zizmor-remediation

security: fix zizmor workflow findings

Author: mpgn

.github/workflows/dotnetcore.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
     - run: git fetch --prune --unshallow
 
     - name: Dump globals
@@ -26,13 +26,13 @@ jobs:
         GLOBAL_STEPS: ${{ toJson(steps) }}
 
     - name: Install GitVersion
-      uses: gittools/actions/gitversion/setup@v1.1.1
+      uses: gittools/actions/gitversion/setup@8d68520cde93ca9226ee0e09870caaca033d2cd2 # v1.1.1
       with:
           versionSpec: '5.12.0'
 
     - name: Use GitVersion
       id: gitversion # step id used as reference for output values
-      uses: gittools/actions/gitversion/execute@v1.1.1
+      uses: gittools/actions/gitversion/execute@8d68520cde93ca9226ee0e09870caaca033d2cd2 # v1.1.1
 
     - name: LocalDB
       run: |
@@ -79,14 +79,14 @@ jobs:
     - name: Get release
       if: startsWith(github.ref, 'refs/tags/')
       id: get_release
-      uses: bruceadams/get-release@v1.2.2
+      uses: bruceadams/get-release@f589ce0779c7bef1faf175f7488c972eb47dc046 # v1.2.2
       env:
         GITHUB_TOKEN: ${{ github.token }}
 
     - name: Upload Release Asset
       if: startsWith(github.ref, 'refs/tags/')
       id: upload-release-asset
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with: