fix(ci): adopt Actions dependency lockfile (estate startup_failure remediation)

.github/workflows/actions.lock

@@ -0,0 +1,297 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.2'
+workflows:
+    '.github/workflows/boj-build.yml':
+        - 'actions/checkout@v4.1.7'
+    '.github/workflows/build.yml':
+        - 'actions/checkout@v4.3.1'
+        - 'sonarsource/sonarqube-scan-action@v8.1.0'
+    '.github/workflows/casket-pages.yml':
+        - 'actions/cache@v4.3.0'
+        - 'actions/checkout@v4.1.1'
+        - 'actions/configure-pages@v5.0.0'
+        - 'actions/deploy-pages@v4.0.5'
+        - 'actions/upload-pages-artifact@v3.0.1'
+        - 'haskell-actions/setup@v2.7.5'
+    '.github/workflows/ci.yml':
+        - 'actions/attest-build-provenance@v2.4.0'
+        - 'actions/cache@v4.2.3'
+        - 'actions/checkout@v6.0.1'
+        - 'actions/download-artifact@v8.0.1'
+        - 'actions/setup-node@v4.0.2'
+        - 'actions/upload-artifact@v4.4.3'
+        - 'codecov/codecov-action@v3.1.4'
+        - 'docker/build-push-action@v6.19.2'
+        - 'docker/login-action@v3.1.0'
+        - 'docker/metadata-action@v5.5.1'
+        - 'docker/setup-buildx-action@v3.3.0'
+        - 'dtolnay/rust-toolchain@stable'
+        - 'erlef/setup-beam@v1.18.2'
+        - 'github/codeql-action@v3.31.10'
+        - 'ludeeus/action-shellcheck@2.0.0'
+        - 'returntocorp/semgrep-action@v1'
+        - 'rustsec/audit-check@v2.0.0'
+        - 'softprops/action-gh-release@v2.6.2'
+    '.github/workflows/codeql.yml':
+        - 'actions/checkout@v6.0.2'
+        - 'github/codeql-action@v4.34.0'
+    '.github/workflows/container-policy.yml':
+        - 'actions/checkout@v6.0.1'
+    '.github/workflows/dogfood-gate.yml':
+        - 'actions/checkout@v4.3.1'
+        - 'hyperpolymath/a2ml-ecosystem@main'
+        - 'hyperpolymath/k9-ecosystem@main'
+    '.github/workflows/governance.yml': []
+    '.github/workflows/hypatia-scan.yml':
+        - 'actions/checkout@v6.0.2'
+        - 'actions/github-script@v8.0.0'
+        - 'actions/upload-artifact@v4.6.2'
+        - 'erlef/setup-beam@v1.24.0'
+        - 'github/codeql-action@v4.32.6'
+    '.github/workflows/instant-sync.yml':
+        - 'peter-evans/repository-dispatch@v4.0.1'
+    '.github/workflows/language-policy.yml':
+        - 'actions/checkout@v6.0.2'
+    '.github/workflows/mirror.yml':
+        - 'actions/checkout@v6.0.1'
+        - 'dtolnay/rust-toolchain@stable'
+        - 'webfactory/ssh-agent@v0.9.1'
+    '.github/workflows/pages.yml':
+        - 'actions/checkout@v4.4.0'
+        - 'actions/deploy-pages@v4.0.5'
+        - 'actions/upload-pages-artifact@v3.0.1'
+    '.github/workflows/push-email-notify.yml':
+        - 'dawidd6/action-send-mail@v3.12.0'
+    '.github/workflows/scorecard.yml': []
+    '.github/workflows/secret-scanner.yml':
+        - 'actions/checkout@v6.0.2'
+        - 'gitleaks/gitleaks-action@v2.3.9'
+        - 'trufflesecurity/trufflehog@v3.93.8'
+dependencies:
+    'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01':
+        ref: 'predicate@1.1.5'
+        commit: 'sha1-1176ef556905f349f669722abf30bce1a6e16e01'
+        owner_id: 44036562
+        repo_id: 760702757
+    'actions/attest-build-provenance@v2.4.0':
+        ref: 'v2.4.0'
+        commit: 'sha1-e8998f949152b193b063cb0ec769d69d929409be'
+        owner_id: 44036562
+        repo_id: 760702757
+        uses:
+            - 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01'
+            - 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
+    'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc':
+        ref: 'v2.4.0'
+        commit: 'sha1-ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
+        owner_id: 44036562
+        repo_id: 760701061
+    'actions/cache@v4.2.3':
+        ref: 'v4.2.3'
+        commit: 'sha1-5a3ec84eff668545956fd18022155c47e93e2684'
+        owner_id: 44036562
+        repo_id: 215566462
+    'actions/cache@v4.3.0':
+        ref: 'v4.3.0'
+        commit: 'sha1-0057852bfaa89a56745cba8c7296529d2fc39830'
+        owner_id: 44036562
+        repo_id: 215566462
+    'actions/checkout@v4.1.1':
+        ref: 'v4.1.1'
+        commit: 'sha1-b4ffde65f46336ab88eb53be808477a3936bae11'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v4.1.7':
+        ref: 'v4.1.7'
+        commit: 'sha1-692973e3d937129bcbf40652eb9f2f61becf3332'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v4.3.1':
+        ref: 'v4.3.1'
+        commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v4.4.0':
+        ref: 'v4.4.0'
+        commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v6.0.1':
+        ref: 'v6.0.1'
+        commit: 'sha1-8e8c483db84b4bee98b60c0593521ed34d9990e8'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v6.0.2':
+        ref: 'v6.0.2'
+        commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/configure-pages@v5.0.0':
+        ref: 'v5.0.0'
+        commit: 'sha1-983d7736d9b0ae728b81ab479565c72886d7745b'
+        owner_id: 44036562
+        repo_id: 513659658
+    'actions/deploy-pages@v4.0.5':
+        ref: 'v4.0.5'
+        commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
+        owner_id: 44036562
+        repo_id: 438112499
+    'actions/download-artifact@v8.0.1':
+        ref: 'v8.0.1'
+        commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
+        owner_id: 44036562
+        repo_id: 192626254
+    'actions/github-script@v8.0.0':
+        ref: 'v8.0.0'
+        commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd'
+        owner_id: 44036562
+        repo_id: 205262760
+    'actions/setup-node@v4.0.2':
+        ref: 'v4.0.2'
+        commit: 'sha1-60edb5dd545a775178f52524783378180af0d1f8'
+        owner_id: 44036562
+        repo_id: 189476904
+    'actions/upload-artifact@v4':
+        ref: 'v4'
+        commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
+        owner_id: 44036562
+        repo_id: 192625955
+    'actions/upload-artifact@v4.4.3':
+        ref: 'v4.4.3'
+        commit: 'sha1-b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882'
+        owner_id: 44036562
+        repo_id: 192625955
+    'actions/upload-artifact@v4.6.2':
+        ref: 'v4.6.2'
+        commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
+        owner_id: 44036562
+        repo_id: 192625955
+    'actions/upload-pages-artifact@v3.0.1':
+        ref: 'v3.0.1'
+        commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa'
+        owner_id: 44036562
+        repo_id: 496012378
+        uses:
+            - 'actions/upload-artifact@v4'
+    'codecov/codecov-action@v3.1.4':
+        ref: 'v3.1.4'
+        commit: 'sha1-eaaf4bedf32dbdc6b720b63067d99c4d77d6047d'
+        owner_id: 8226205
+        repo_id: 200299178
+    'dawidd6/action-send-mail@v3.12.0':
+        ref: 'v3.12.0'
+        commit: 'sha1-6e502825a508b867ab2954ad6343b68787624c01'
+        owner_id: 9713907
+        repo_id: 222439721
+    'docker/build-push-action@v6.19.2':
+        ref: 'v6.19.2'
+        commit: 'sha1-10e90e3645eae34f1e60eeb005ba3a3d33f178e8'
+        owner_id: 5429470
+        repo_id: 241092383
+    'docker/login-action@v3.1.0':
+        ref: 'v3.1.0'
+        commit: 'sha1-e92390c5fb421da1463c202d546fed0ec5c39f20'
+        owner_id: 5429470
+        repo_id: 287743349
+    'docker/metadata-action@v5.5.1':
+        ref: 'v5.5.1'
+        commit: 'sha1-8e5442c4ef9f78752691e2d8f8d19755c6f78e81'
+        owner_id: 5429470
+        repo_id: 306769011
+    'docker/setup-buildx-action@v3.3.0':
+        ref: 'v3.3.0'
+        commit: 'sha1-d70bba72b1f3fd22344832f00baa16ece964efeb'
+        owner_id: 5429470
+        repo_id: 288485773
+    'dtolnay/rust-toolchain@stable':
+        ref: 'stable'
+        commit: 'sha1-4cda84d5c5c54efe2404f9d843567869ab1699d4'
+        owner_id: 1940490
+        repo_id: 260749683
+    'erlef/setup-beam@v1.18.2':
+        ref: 'v1.18.2'
+        commit: 'sha1-5304e04ea2b355f03681464e683d92e3b2f18451'
+        owner_id: 47606891
+        repo_id: 331103973
+    'erlef/setup-beam@v1.24.0':
+        ref: 'v1.24.0'
+        commit: 'sha1-fc68ffb90438ef2936bbb3251622353b3dcb2f93'
+        owner_id: 47606891
+        repo_id: 331103973
+    'github/codeql-action@v3.31.10':
+        ref: 'v3.31.10'
+        commit: 'sha1-4bdb89f48054571735e3792627da6195c57459e2'
+        owner_id: 9919
+        repo_id: 259445878
+    'github/codeql-action@v4.32.6':
+        ref: 'v4.32.6'
+        commit: 'sha1-0d579ffd059c29b07949a3cce3983f0780820c98'
+        owner_id: 9919
+        repo_id: 259445878
+    'github/codeql-action@v4.34.0':
+        ref: 'v4.34.0'
+        commit: 'sha1-c6f931105cb2c34c8f901cc885ba1e2e259cf745'
+        owner_id: 9919
+        repo_id: 259445878
+    'gitleaks/gitleaks-action@v2.3.9':
+        ref: 'v2.3.9'
+        commit: 'sha1-ff98106e4c7b2bc287b24eaf42907196329070c7'
+        owner_id: 90395851
+        repo_id: 242854909
+    'haskell-actions/setup@v2.7.5':
+        ref: 'v2.7.5'
+        commit: 'sha1-ec49483bfc012387b227434aba94f59a6ecd0900'
+        owner_id: 75048950
+        repo_id: 623796603
+    'hyperpolymath/a2ml-ecosystem@main':
+        ref: 'main'
+        commit: 'sha1-aa4b836bd969df2bc58128cb8e3d20bbc88d5e79'
+        owner_id: 6759885
+        repo_id: 1275649586
+    'hyperpolymath/k9-ecosystem@main':
+        ref: 'main'
+        commit: 'sha1-89f3c2702f4f650a92aa7411502f38da06abd562'
+        owner_id: 6759885
+        repo_id: 1275650185
+    'ludeeus/action-shellcheck@2.0.0':
+        ref: '2.0.0'
+        commit: 'sha1-00b27aa7cb85167568cb48a3838b75f4265f2bca'
+        owner_id: 15093472
+        repo_id: 174679242
+    'peter-evans/repository-dispatch@v4.0.1':
+        ref: 'v4.0.1'
+        commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
+        owner_id: 18365890
+        repo_id: 220359305
+    'returntocorp/semgrep-action@v1':
+        ref: 'v1'
+        commit: 'sha1-713efdd345f3035192eaa63f56867b88e63e4e5d'
+        owner_id: 147861678
+        repo_id: 715166645
+    'rustsec/audit-check@v2.0.0':
+        ref: 'v2.0.0'
+        commit: 'sha1-69366f33c96575abad1ee0dba8212993eecbe998'
+        owner_id: 25397242
+        repo_id: 523199201
+    'softprops/action-gh-release@v2.6.2':
+        ref: 'v2.6.2'
+        commit: 'sha1-3bb12739c298aeb8a4eeaf626c5b8d85266b0e65'
+        owner_id: 2242
+        repo_id: 204253808
+    'sonarsource/sonarqube-scan-action@v8.1.0':
+        ref: 'v8.1.0'
+        commit: 'sha1-7006c4492b2e0ee0f816d36501671557c97f5995'
+        owner_id: 545988
+        repo_id: 366408409
+    'trufflesecurity/trufflehog@v3.93.8':
+        ref: 'v3.93.8'
+        commit: 'sha1-6c05c4a00b91aa542267d8e32a8254774799d68d'
+        owner_id: 79229934
+        repo_id: 77726177
+    'webfactory/ssh-agent@v0.9.1':
+        ref: 'v0.9.1'
+        commit: 'sha1-a6f90b1f127823b31d4d4a8d96047790581349bd'
+        owner_id: 135788
+        repo_id: 208510314

.github/workflows/boj-build.yml

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+# This workflow is managed by gh actions-lock.
 name: BoJ Server Build Trigger
 on:
   push:
@@ -10,7 +11,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@v4.1.7
       - name: Trigger BoJ Server (Casket/ssg-mcp)
         run: |
           # Send a secure trigger to boj-server to build this repository

.github/workflows/build.yml

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+# This workflow is managed by gh actions-lock.
 name: Build
 on:
   push:
@@ -18,10 +19,10 @@ jobs:
     if: github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@v4.3.1
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0
+        uses: SonarSource/sonarqube-scan-action@v8.1.0
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/casket-pages.yml

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+# This workflow is managed by gh actions-lock.
 name: GitHub Pages
 
 on:
@@ -21,22 +22,22 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@v4.1.1
 
       - name: Checkout casket-ssg
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@v4.1.1
         with:
           repository: hyperpolymath/casket-ssg
           path: .casket-ssg
 
       - name: Setup GHCup
-        uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
+        uses: haskell-actions/setup@v2.7.5
         with:
           ghc-version: '9.8.2'
           cabal-version: '3.10'
 
       - name: Cache Cabal
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@v4.3.0
         with:
           path: |
             ~/.cabal/packages
@@ -98,10 +99,10 @@ jobs:
           touch ../_site/.nojekyll
 
       - name: Setup Pages
-        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
+        uses: actions/configure-pages@v5.0.0
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
+        uses: actions/upload-pages-artifact@v3.0.1
         with:
           path: '_site'
 
@@ -115,4 +116,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
+        uses: actions/deploy-pages@v4.0.5