feat: pin workflow with ratchet

Co-authored-by: Tommy Trøen <[email protected]>

Author: ybelMekk

.github/workflows/main.yml

@@ -16,7 +16,7 @@ jobs:
       go_version: ${{ steps.go_version.outputs.GO_VERSION }}
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
       - name: Find Go version
         id: go_version
         run: |
@@ -26,13 +26,13 @@ jobs:
     runs-on: ubuntu-24.04
     needs: go_version
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
+      - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # ratchet:actions/setup-go@v5
         with:
           go-version: ${{ needs.go_version.outputs.go_version }}
           cache-dependency-path: ./go.sum
 
-     # - name: Check for vulnerable dependencies and static code
+      #- name: Check for vulnerable dependencies and static code
       #  run: make check
 
       - name: Run tests
@@ -49,10 +49,10 @@ jobs:
     name: build and push
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
 
       - name: Build push v13s image
-        uses: nais/platform-build-push-sign@main
+        uses: nais/platform-build-push-sign@main # ratchet:exclude
         id: build-push-sign
         with:
           name: ${{ env.NAME }}
@@ -64,7 +64,7 @@ jobs:
         run: |-
           yq e '.image.tag = "${{ steps.build-push-sign.outputs.version }}"' -i ./charts/values.yaml
 
-      - uses: azure/setup-helm@v4
+      - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # ratchet:azure/setup-helm@v4
         name: "Setup Helm"
         with:
           version: "v3.15.1"
@@ -85,7 +85,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: nais/fasit-deploy@v2
+      - uses: nais/fasit-deploy@v2 # ratchet:exclude
         with:
           chart: ${{ env.FEATURE_REPOSITORY }}/${{ env.NAME }}
-          version: ${{ needs.build_and_push.outputs.version }}
+          version: ${{ needs.build_and_push.outputs.version }}