Pin action versions

.github/workflows/push-docker.yml

@@ -11,16 +11,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
 
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v3.5.2
     
     - name: Set up JDK 17
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v3.11.0
       with:
         java-version: '17'
         distribution: 'temurin'
     
 
-    - uses: gradle/gradle-build-action@v2.3.3
+    - uses: gradle/gradle-build-action@v2.4.2
       with:
         gradle-version: 7.6
         arguments: clean build
@@ -39,7 +39,7 @@ jobs:
         password: ${{ secrets.DOCKER_HUB_API }}
         
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v2
+      uses: docker/login-action@v2.1.0
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
@@ -47,7 +47,7 @@ jobs:
 
     - name: Generate tags
       id: meta
-      uses: docker/metadata-action@v4
+      uses: docker/metadata-action@v4.4.0
       with:
         images: |
           frooodle/s-pdf
@@ -56,13 +56,13 @@ jobs:
           ${{ steps.versionNumber.outputs.versionNumber }}${{ github.ref == 'refs/heads/main' && '-alpha' || '' }}
    
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v2
+      uses: docker/setup-qemu-action@v2.1.0
       
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v2
+      uses: docker/setup-buildx-action@v2.5.0
         
     - name: Build and push
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@v4.0.0
       with:
         push: true
         tags: ${{ steps.meta.outputs.tags }}