Chris le roy

Results 2 issues of Chris le roy

Feature request from @singe. This is currently in another branch that needs to be merged.

enhancement
todo

This PR pins action references in workflow and action files to SHAs. This is in support of [SEC-090](https://github.com/hashicorp/security-tsccr/issues/220); Any questions please reach out to [#team-prodsec](https://go.hashi.co/team-prodsec)

SEC-090
SEC-090/Pinning/Trusted