fix: pin 5 unpinned action(s) (#6157)

.github/workflows/check-for-spammy-issues.yml

@@ -9,6 +9,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: close issue
-        uses: balevine/mark-as-spam@v1.0
+        uses: balevine/mark-as-spam@9f9b68e6eaf35c84c5487b397182e792920039ba # v1.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-quality-check.yaml

@@ -86,7 +86,7 @@ jobs:
       contents: write
     steps:
       - name: Post quality report comment
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@70d2764d1a7d5d9560b100cbea0077fc8f633987 # v3
         with:
           header: pr-quality-check
           message: |
@@ -98,7 +98,7 @@ jobs:
 
       - name: Sync labels
         if: needs.quality.outputs.labels != ''
-        uses: actions-ecosystem/action-add-labels@v1
+        uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           labels: ${{ join(fromJson(needs.quality.outputs.labels), '\n') }}
@@ -118,7 +118,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Post skip notice
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@70d2764d1a7d5d9560b100cbea0077fc8f633987 # v3
         with:
           header: pr-quality-check
           message: |

.github/workflows/site-deploy.yaml

@@ -33,7 +33,7 @@ jobs:
         with:
           node-version: 20
       - name: deploy awesome-go.com
-        uses: nwtgck/actions-netlify@v3.0
+        uses: nwtgck/actions-netlify@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654 # v3.0
         with:
           publish-dir: "./out"
           production-branch: main