[fix][COM][ci] pin third-party GitHub Actions to ASF allowlisted SHAs

.github/workflows/auto-comment.yml

@@ -25,31 +25,31 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Create comment
-        uses: actions-cool/issues-helper@v3
-        with:
-          actions: 'create-comment'
-          token: ${{ secrets.GITHUB_TOKEN }}
-          issue-number: ${{ github.event.issue.number }}
-          body: |
-            ## :blush:  Welcome to the Apache Linkis community!!
-            We are glad that you are contributing by opening this issue.
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh issue comment "${{ github.event.issue.number }}" \
+            --repo "${{ github.repository }}" --body-file - <<'EOF'
+          ## :blush:  Welcome to the Apache Linkis community!!
+          We are glad that you are contributing by opening this issue.
 
-            Please make sure to include all the relevant context.
-            We will be here shortly.
+          Please make sure to include all the relevant context.
+          We will be here shortly.
 
-            If you are interested in contributing to our website project, please let us know!
-            You can check out our contributing guide on
-             :point_right:  [How to Participate in Project Contribution](https://linkis.apache.org/community/how-to-contribute).
+          If you are interested in contributing to our website project, please let us know!
+          You can check out our contributing guide on
+           :point_right:  [How to Participate in Project Contribution](https://linkis.apache.org/community/how-to-contribute).
 
 
-            ### Community
+          ### Community
 
-            |WeChat Assistant|WeChat Public Account|
-            |-|-|
-            |<img src="https://linkis.apache.org/Images/wedatasphere_contact_01.png" width="128"/>|<img src="https://linkis.apache.org/Images/gzh_01.png" width="128"/>|
+          |WeChat Assistant|WeChat Public Account|
+          |-|-|
+          |<img src="https://linkis.apache.org/Images/wedatasphere_contact_01.png" width="128"/>|<img src="https://linkis.apache.org/Images/gzh_01.png" width="128"/>|
 
 
-            ### Mailing Lists
-            |Name|Description|Subscribe|Unsubscribe|Archive|
-            |:-----|:--------|:------|:-------|:-----|
-            | [dev@linkis.apache.org](mailto:dev@linkis.apache.org) | community activity information | [subscribe](mailto:dev-subscribe@linkis.apache.org) | [unsubscribe](mailto:dev-unsubscribe@linkis.apache.org) | [archive](http://mail-archives.apache.org/mod_mbox/linkis-dev) |
+          ### Mailing Lists
+          |Name|Description|Subscribe|Unsubscribe|Archive|
+          |:-----|:--------|:------|:-------|:-----|
+          | [dev@linkis.apache.org](mailto:dev@linkis.apache.org) | community activity information | [subscribe](mailto:dev-subscribe@linkis.apache.org) | [unsubscribe](mailto:dev-unsubscribe@linkis.apache.org) | [archive](http://mail-archives.apache.org/mod_mbox/linkis-dev) |
+          EOF

.github/workflows/integration-test.yml

@@ -96,7 +96,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Build frontend by node.js
         run: |

.github/workflows/publish-docker.yaml

@@ -55,9 +55,9 @@ jobs:
       with:
         node-version: ${{ matrix.node-version }}
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v1
+      uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v1
+      uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
     - name: Build frontend by node.js
       run: |
           cd linkis-web
@@ -69,7 +69,7 @@ jobs:
       run: |
           ./mvnw install -Pdocker -Dmaven.javadoc.skip=true -Dmaven.test.skip=true -Dlinkis.build.web=true -Dlinkis.build.ldh=true
     - name: Log in to the Container registry
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
       with:
         registry: ${{ env.HUB }}
         username: ${{ github.actor }}