chore(deps): pin dependencies

action.yml

@@ -21,26 +21,26 @@ runs:
   using: "composite"
   steps:
     - name: Checkout
-      uses: https://git.kjan.de/actions/checkout@v4
+      uses: https://git.kjan.de/actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
     - name: Set up Docker Buildx
-      uses: https://git.kjan.de/actions/setup-buildx-action@v3
+      uses: https://git.kjan.de/actions/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
 
     - name: Login to local Docker Registry
-      uses: https://git.kjan.de/actions/login-action@v3
+      uses: https://git.kjan.de/actions/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
       with:
         registry: git.kjan.de
         username: ${{ inputs.REGISTRY_USERNAME }}
         password: ${{ inputs.REGISTRY_TOKEN }}
 
     - name: Login to Docker.io Registry
-      uses: https://git.kjan.de/actions/login-action@v3
+      uses: https://git.kjan.de/actions/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
       with:
         username: ${{ inputs.DOCKER_USERNAME }}
         password: ${{ inputs.DOCKER_PASSWORD }}
 
     - name: Cache Docker layers
-      uses: actions/cache@v4
+      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
       with:
         path: /tmp/.buildx-cache
         key: ${{ runner.os }}-${{ inputs.name }}-${{ github.sha }}
@@ -48,7 +48,7 @@ runs:
           ${{ runner.os }}-${{ inputs.name }}-                
 
     - name: Build and push
-      uses: https://git.kjan.de/actions/build-push-action@v6
+      uses: https://git.kjan.de/actions/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6
       with:
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max