use git hash of a release tag instead of main (#4203)

Signed-off-by: Carlos Panato <[email protected]>

Author: cpanato

.github/workflows/donotsubmit.yaml

@@ -40,4 +40,4 @@ jobs:
           persist-credentials: false
 
       - name: Do Not Submit
-        uses: chainguard-dev/actions/donotsubmit@9c0be1ee0103db886d1887d114ec97f8766b7ef8 # main
+        uses: chainguard-dev/actions/donotsubmit@ec48ea414c0cb207549029d8fe35f8f01e563219 # v1.0.8

.github/workflows/e2e-tests.yml

@@ -220,4 +220,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@9c0be1ee0103db886d1887d114ec97f8766b7ef8 # main
+      uses: chainguard-dev/actions/kind-diag@ec48ea414c0cb207549029d8fe35f8f01e563219 # v1.0.8

.github/workflows/kind-verify-attestation.yaml

@@ -156,7 +156,7 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@9c0be1ee0103db886d1887d114ec97f8766b7ef8 # main
+      uses: chainguard-dev/actions/kind-diag@ec48ea414c0cb207549029d8fe35f8f01e563219 # v1.0.8
 
     - name: Create vuln attestation for it
       run: |

.github/workflows/tests.yaml

@@ -169,7 +169,7 @@ jobs:
 
       - name: Collect diagnostics
         if: ${{ failure() }}
-        uses: chainguard-dev/actions/kind-diag@9c0be1ee0103db886d1887d114ec97f8766b7ef8 # main
+        uses: chainguard-dev/actions/kind-diag@ec48ea414c0cb207549029d8fe35f8f01e563219 # v1.0.8
 
   e2e-windows-powershell-tests:
     name: Run PowerShell E2E tests

.github/workflows/whitespace.yaml

@@ -38,8 +38,8 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: chainguard-dev/actions/trailing-space@9c0be1ee0103db886d1887d114ec97f8766b7ef8 # main
+      - uses: chainguard-dev/actions/trailing-space@ec48ea414c0cb207549029d8fe35f8f01e563219 # v1.0.8
         if: ${{ always() }}
 
-      - uses: chainguard-dev/actions/eof-newline@9c0be1ee0103db886d1887d114ec97f8766b7ef8 # main
+      - uses: chainguard-dev/actions/eof-newline@ec48ea414c0cb207549029d8fe35f8f01e563219 # v1.0.8
         if: ${{ always() }}