Update Github actions

- Pin action versions
- Update nancy to use --guide-token
- Mirror all steps from build to release

Author: TheoBrigitte

.github/workflows/build.yaml

@@ -5,24 +5,24 @@ on:
     branches:
     - '*'
     tags-ignore:
-    - 'v*'
+    - v*
 
 jobs:
   build:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         fetch-depth: 0
-    - uses: actions/setup-go@v6
+    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
       with:
         go-version: stable
-    - uses: golangci/golangci-lint-action@v9
+    - uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
     - name: go list
       run: go list -json -deps ./... > go.list
-    - uses: sonatype-nexus-community/nancy-github-action@main
+    - uses: sonatype-nexus-community/nancy-github-action@aae196481b961d446f4bff9012e4e3b63d7921a4 # v1.0.2
       with:
-        nancyCommand: sleuth --username ${{ vars.OSSI_USERNAME }} --token ${{ secrets.OSSI_TOKEN }}
+        nancyCommand: sleuth --username ${{ vars.OSSI_USERNAME }} --guide-token ${{ secrets.OSSI_TOKEN }}
     - run: make test
     - run: make build-all
       env:

.github/workflows/release.yaml

@@ -9,12 +9,19 @@ jobs:
   release:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         fetch-depth: 0
-    - uses: actions/setup-go@v6
+    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
       with:
         go-version: stable
+    - uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
+    - name: go list
+      run: go list -json -deps ./... > go.list
+    - uses: sonatype-nexus-community/nancy-github-action@aae196481b961d446f4bff9012e4e3b63d7921a4 # v1.0.2
+      with:
+        nancyCommand: sleuth --username ${{ vars.OSSI_USERNAME }} --guide-token ${{ secrets.OSSI_TOKEN }}
+    - run: make test
     - run: make build-all
       env:
         BUILD_USER: github-action