ci: use cha for actions

Signed-off-by: Philippe Martin <phmartin@redhat.com>

Author: feloy

.github/workflows/e2e-tests.yaml

@@ -28,7 +28,7 @@ jobs:
     name: Build Extension Image
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Build Image and Extract Files
         id: build-image
         run: |
@@ -39,7 +39,7 @@ jobs:
           podman rm -f $CONTAINER_ID
           podman rmi -f localhost/local_image:latest
       - name: Upload Extension Image Artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: extension-plugin
           path: output/plugins/
@@ -59,7 +59,7 @@ jobs:
       # by default playwright cache browsers binaries in ~/.cache/ms-playwright on Linux and %USERPROFILE%\AppData\Local\ms-playwright on Windows
       PLAYWRIGHT_BROWSERS_PATH: ${{ github.workspace }}/podman-desktop/pw-browsers
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       # ==============================================
       # Installing Podman
@@ -78,13 +78,13 @@ jobs:
       # ==============================================
       # Installing Podman Desktop
       # ==============================================
-      - uses: pnpm/action-setup@v4
+      - uses: uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
         name: Install pnpm
         with:
           run_install: false
 
       # Install Node.js
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version: 22
           cache: 'pnpm'
@@ -106,7 +106,7 @@ jobs:
       # Check cache for existing podman-desktop
       - name: Cache Podman Desktop
         id: cache-pd
-        uses: actions/cache@v4
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: ${{ github.workspace }}/podman-desktop
           key: pd-${{ steps.pd-api-version.outputs.PD_VERSION }}-${{ runner.os }}
@@ -140,7 +140,7 @@ jobs:
 
       # Install the extension
       - name: Download Extension Plugin
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           name: extension-plugin
           path: tests/playwright/tests/playwright/output/kubernetes-dashboard-tests/plugins/
@@ -151,7 +151,7 @@ jobs:
         env:
           NODE_OPTIONS: --no-experimental-strip-types
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         if: always()
         with:
           name: e2e-pr-check-${{ matrix.os }}