Added pinned actions and token permissions

[soumeh01]

Addressing : https://github.com/ossf/scorecard/blob/49c0eed3a423f00c872b5c3c9f1bbca9e8aae799/docs/checks.md#token-permissions

[github-actions]

Test Results

    4 files  ±0    36 suites  ±0   2s ⏱️ -1s
159 tests ±0  159 ✔️ ±0  0 💤 ±0  0 ❌ ±0 
636 runs  ±0  636 ✔️ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit dd465df. ± Comparison against base commit d7b1a57.

♻️ This comment has been updated with latest results.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

.github/workflows/build.yml

• actions/checkout@b4ffde6
• actions/setup-go@93397be
• actions/upload-artifact@a8a3f3a
• actions/checkout@4.1.1
• actions/setup-go@4
• actions/upload-artifact@3

.github/workflows/codeql.yml

• actions/checkout@b4ffde6
• github/codeql-action@407ffaf
• github/codeql-action@407ffaf
• actions/checkout@4
• github/codeql-action/analyze@2
• github/codeql-action/init@2

.github/workflows/dependency-review.yml

• actions/checkout@b4ffde6
• actions/dependency-review-action@7bbfa03

.github/workflows/global.yaml

• actions/checkout@b4ffde6
• actions/checkout@4.1.1

.github/workflows/markdown.yml

• actions/checkout@b4ffde6
• avto-dev/markdown-lint@04d43ee
• gaurav-nelson/github-action-markdown-link-check@0f074c8
• actions/checkout@4.1.1
• avto-dev/markdown-lint@1
• gaurav-nelson/github-action-markdown-link-check@master

.github/workflows/release.yml

• actions/checkout@b4ffde6
• actions/setup-go@93397be
• goreleaser/goreleaser-action@7ec5c2b
• actions/checkout@4.1.1
• actions/setup-go@4
• goreleaser/goreleaser-action@5

.github/workflows/test.yml

• EnricoMi/publish-unit-test-result-action@ca89ad0
• actions/checkout@b4ffde6
• actions/download-artifact@9bc31d5
• actions/setup-go@93397be
• actions/upload-artifact@a8a3f3a
• golang/govulncheck-action@7da72f7
• golangci/golangci-lint-action@3a91952
• enricomi/publish-unit-test-result-action@2
• actions/checkout@4.1.1
• actions/download-artifact@3
• actions/setup-go@4
• actions/upload-artifact@3
• golang/govulncheck-action@1
• golangci/golangci-lint-action@3

.github/workflows/tpip-check.yml

• actions/checkout@b4ffde6
• actions/download-artifact@9bc31d5
• actions/setup-go@93397be
• actions/upload-artifact@a8a3f3a
• peter-evans/create-pull-request@1534078
• actions/checkout@4.1.1
• actions/download-artifact@3
• actions/setup-go@4
• actions/upload-artifact@3
• peter-evans/create-pull-request@5

[codeclimate]

Code Climate has analyzed commit dd465df and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (80% is the threshold).

This pull request will bring the total coverage in the repository to 82.6% (0.0% change).

View more on Code Climate.