Pinned GHA deps

.github/workflows/ami-cleanup-cd.yaml

@@ -12,9 +12,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/[email protected]
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Install Earthly
-        uses: earthly/[email protected]
+        uses: earthly/actions-setup@be3fe0c1f84e9776b5a184d21bf7a4a779ea2e6b # v1.0.8
         with:
           # renovate: earthly-version
           version: v0.7.23

.github/workflows/ami-cleanup-ci.yaml

@@ -17,7 +17,7 @@ jobs:
       should-verify-pr: ${{ steps.filter.outputs.changed }} # True if the AMI cleanup tool changed, false otherwise
     steps:
       - name: Filter out unrelated changes
-        uses: dorny/[email protected]
+        uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1
         id: filter
         with:
           filters: |
@@ -29,9 +29,9 @@ jobs:
     if: ${{ needs.check-if-should-run.outputs.should-verify-pr }}
     steps:
       - name: Checkout repo
-        uses: actions/[email protected]
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Install Earthly
-        uses: earthly/[email protected]
+        uses: earthly/actions-setup@be3fe0c1f84e9776b5a184d21bf7a4a779ea2e6b # v1.0.8
         with:
           # renovate: earthly-version
           version: v0.7.23