[release-12.0.1] Backport workflow fixes (#104692)

* Copy workflows and actions from main * add zizmor.yml
2025-04-29 11:12:47 -05:00
parent 18fb652499
commit 8bb4c806fb
71 changed files with 826 additions and 708 deletions
@@ -40,15 +40,16 @@ jobs:

    steps:
    - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
      with:
        # We must fetch at least the immediate parents so that if this is
        # a pull request then we can checkout the head.
        fetch-depth: 2
+        persist-credentials: false

    - if: matrix.language == 'go'
      name: Set go version
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639
      with:
        go-version-file: go.mod