ci(gh-actions): pin action versions to sha-1 with ratchet

.github/workflows/jekyll.yml

@@ -20,7 +20,7 @@ jobs:
           ${{ runner.os }}-gems-
 
     # Build Jekyll to the specified target branch
-    - uses: helaili/jekyll-action@v2
+    - uses: helaili/jekyll-action@c1527523361ec3ecc54b2371ddef44826e28c0f5 # ratchet:helaili/jekyll-action@v2
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         target_branch: 'gh-pages'

.github/workflows/link-checker.yml

@@ -23,7 +23,7 @@ jobs:
     if: ${{ github.repository_owner == 'music-encoding' }}
 
     steps:
-      - uses: technote-space/broken-link-checker-action@v2
+      - uses: technote-space/broken-link-checker-action@7820497a025fb09ff736ee11bb8bb12ca715b4fe # ratchet:technote-space/broken-link-checker-action@v2
         with:
           target: ${{ env.CHECK_WEBSITE }}
 
@@ -45,13 +45,13 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/[email protected]
+        uses: lycheeverse/lychee-action@97189f2c0a3c8b0cb0e704fd4e878af6e5e2b2c5 # ratchet:lycheeverse/lychee-action@v1.7.0
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
       - name: Create Issue From File
         if: env.lychee_exit_code != 0
-        uses: peter-evans/create-issue-from-file@v4
+        uses: peter-evans/create-issue-from-file@433e51abf769039ee20ba1293a088ca19d573b7f # ratchet:peter-evans/create-issue-from-file@v4
         with:
           title: Link Checker Report
           content-filepath: ./lychee/out.md