The openSSF scorecard report warns that the github actions are not
pinned by hash.

This PR aims at improving this by pinning the auto-assign.yaml workflow by hash.

Signed-off-by: harshitasao <[email protected]>

The openSSF scorecard report warns that the github workflows are not pinned by hash.

This PR aims at improving this by pinning the github workflows by hash.

Signed-off-by: harshitasao <[email protected]>

The openSSF scorecard report warns that the github actions are not pinned by hash.

This PR aims at improving this by pinning the github actions by hash.

Signed-off-by: harshitasao <[email protected]>

…encies

ci: pin auto-assign dependencies

…ndencies

ci: github action pin dependencies

…ependencies

ci: github workflows pin dependencies

The jobs to detect the ceph and csi versions now can have
custom annotationso and labels added to them. They are
very short-lived jobs, but they may need custom annotations
in some environments to run.

Signed-off-by: Travis Nielsen <[email protected]>

As we have new csi-addons v0.9.0
updating the same here as well.

Signed-off-by: Madhu Rajanna <[email protected]>

updating cephcsi image to 3.12.0
release.

Signed-off-by: Madhu Rajanna <[email protected]>

csi: update csi-addons to v0.9.0

core: Add annotations and labels to detect version jobs

Fix a github action hash version pin typo that causes canary jobs to not
run.

Signed-off-by: Blaine Gardner <[email protected]>

ci: fix gh action hash pin typo