Merge pull request #8 from cds-snc/repo-sync/site-reliability-engineering/default

chore: synced file(s) with cds-snc/site-reliability-engineering

.github/workflows/backstage-catalog-helper.yml

@@ -25,13 +25,14 @@ jobs:
           app_id: ${{ secrets.SRE_BOT_RW_APP_ID }}
           private_key: ${{ secrets.SRE_BOT_RW_PRIVATE_KEY }}
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v3
+        uses: peter-evans/create-pull-request@6cd32fd93684475c31847837f87bb135d40a2b79 # v7.0.3
         with:
           token: ${{ steps.generate_token.outputs.token}}
-          commit-message: "Add catalog-info.yaml"
-          branch: "backstage/catalog-info"
-          title: "Add catalog-info.yaml"
-          body: "Adding a basic catalog-info.yaml to start populating the backstage catalog with your components."
-          labels: "backstage"
+          sign-commits: true
+          commit-message: 'Add catalog-info.yaml'
+          branch: 'backstage/catalog-info'
+          title: 'Add catalog-info.yaml'
+          body: 'Adding a basic catalog-info.yaml to start populating the backstage catalog with your components.'
+          labels: 'backstage'
           add-paths: |
             catalog-info.yaml

.github/workflows/ossf-scorecard.yml

@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@fdeb02dc9c3fb721c82a431b2708514aca13dbeb
+        uses: ossf/scorecard-action@6c4912ed9e5f80cfda40164b92753f21f0892cab
         with:
           results_file: ossf-results.json
           results_format: json

.github/workflows/s3-backup.yml

@@ -8,6 +8,7 @@ jobs:
   s3-backup:
     runs-on: ubuntu-latest
     steps:
+
     - name: Checkout
       uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with: