Update github actions dependencies

.github/actions/gcp_login/action.yml

@@ -16,4 +16,4 @@ runs:
 
     # Even if preinstalled in Github Actions runner image, this setup does some magic authentication required for gsutil.
     - name: Set up Cloud SDK
-      uses: google-github-actions/setup-gcloud@877d4953d2c70a0ba7ef3290ae968eb24af233bb
+      uses: google-github-actions/setup-gcloud@ee9693ff89cdf73862b8a13988f6a71070e8fc58

.github/workflows/azure-snp-reporter.yml

@@ -65,7 +65,7 @@ jobs:
           go-version: 1.19.2
 
       - name: Download report JWT
-        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # tag=v3.0.0
+        uses: actions/download-artifact@9782bd6a9848b53b110e712e20e42d89988822b7 # tag=v3.0.1
         with:
           name: "maa-report.jwt"
           path: "."

.github/workflows/build-os-image.yml

@@ -23,7 +23,7 @@ jobs:
       disk-mapper-sha256: ${{ steps.collect-hashes.outputs.disk-mapper-sha256 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@e2f20e631ae6d7dd3b768f56a5d2af784dd54791
+        uses: actions/checkout@1f9a0c22da41e6ebfa534300ef656657ea2c6707
 
       - name: Build bootstrapper
         if: ${{ inputs.debug == false }}
@@ -101,10 +101,10 @@ jobs:
         csp: [aws, azure, gcp, qemu]
     steps:
       - name: Checkout
-        uses: actions/checkout@e2f20e631ae6d7dd3b768f56a5d2af784dd54791
+        uses: actions/checkout@1f9a0c22da41e6ebfa534300ef656657ea2c6707
 
       - name: Download build dependencies
-        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
+        uses: actions/download-artifact@9782bd6a9848b53b110e712e20e42d89988822b7
         with:
           name: dependencies
           path: ${{ github.workspace }}/build
@@ -203,10 +203,10 @@ jobs:
             upload-variant: TrustedLaunch
     steps:
       - name: Checkout
-        uses: actions/checkout@e2f20e631ae6d7dd3b768f56a5d2af784dd54791
+        uses: actions/checkout@1f9a0c22da41e6ebfa534300ef656657ea2c6707
 
       - name: Download OS image artifact
-        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
+        uses: actions/download-artifact@9782bd6a9848b53b110e712e20e42d89988822b7
         with:
           name: image-${{ matrix.csp }}
           path: ${{ github.workspace }}/image/mkosi.output.${{ matrix.csp }}/fedora~36
@@ -223,14 +223,14 @@ jobs:
           echo "::endgroup::"
 
       - name: Login to AWS
-        uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838
+        uses: aws-actions/configure-aws-credentials@a12c5029930fcd33589131d496622beb4e256718
         if: ${{ matrix.csp == 'aws' || matrix.csp == 'azure' }}
         with:
           role-to-assume: arn:aws:iam::795746500882:role/GitHubConstellationImagePipeline
           aws-region: eu-central-1
 
       - name: Login to Azure
-        uses: azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2
+        uses: azure/login@642a43caaacadeef67ecede5930b25d56e8277af
         if: ${{ matrix.csp == 'azure' }}
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
@@ -381,10 +381,10 @@ jobs:
         csp: [aws, azure, gcp, qemu]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        uses: actions/checkout@1f9a0c22da41e6ebfa534300ef656657ea2c6707
 
       - name: Download OS image artifact
-        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
+        uses: actions/download-artifact@9782bd6a9848b53b110e712e20e42d89988822b7
         with:
           name: image-${{ matrix.csp }}
 
@@ -426,7 +426,7 @@ jobs:
           echo "::endgroup::"
 
       - name: Download rootfs
-        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741
+        uses: actions/download-artifact@9782bd6a9848b53b110e712e20e42d89988822b7
         with:
           # downloading / using only the QEMU rootfs is fine
           # since the images only differ in the ESP partition
@@ -438,19 +438,19 @@ jobs:
           unsquashfs -user-xattrs -d image.root.tree image.root.raw
           echo "::endgroup::"
 
-      - uses: anchore/sbom-action@eda59434a8e5ce9bda93a202dfe50f6a2e637bb6
+      - uses: anchore/sbom-action@2424de21c44622889b4c7cf9098c0e57648c58bf
         with:
           path: image.root.tree
           artifact-name: sbom.spdx.json
           format: spdx-json
 
-      - uses: anchore/sbom-action@eda59434a8e5ce9bda93a202dfe50f6a2e637bb6
+      - uses: anchore/sbom-action@2424de21c44622889b4c7cf9098c0e57648c58bf
         with:
           path: image.root.tree
           artifact-name: sbom.cyclonedx.json
           format: cyclonedx-json
 
-      - uses: anchore/sbom-action@eda59434a8e5ce9bda93a202dfe50f6a2e637bb6
+      - uses: anchore/sbom-action@2424de21c44622889b4c7cf9098c0e57648c58bf
         with:
           path: image.root.tree
           artifact-name: sbom.syft.json

.github/workflows/test-lint.yml

@@ -49,7 +49,7 @@ jobs:
           echo "submods=${mods}" >> $GITHUB_OUTPUT
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@537aa1903e5d359d0b27dbc19ddd22c5087f3fbc # tag=v3.2.0
+        uses: golangci/golangci-lint-action@07db5389c99593f11ad7b44463c2d4233066a9b1 # tag=v3.3.0
         with:
           skip-pkg-cache: true
           skip-build-cache: true