feat: add options to load the action from a specific repo/ref

.github/workflows/node-test.yaml

@@ -85,10 +85,20 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+
+    - name: Checkout action code
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      env:
+        REPO: ${{ github.action_repository }}
+        REF: ${{ github.action_ref }}
+      with:
+        repository: ${{ env.REPO }}
+        ref: ${{ env.REF }}
+        path: infra-actions
 
     - name: Prepare the matrix
-      uses: pkgjs/action/.github/actions/prepare-node-test-matrix-action@v0.1.10
+      uses: ./infra-actions/.github/actions/prepare-node-test-matrix-action
       id: set-matrix
       with:
         upgrade-policy: ${{ inputs.upgrade-policy }}
@@ -117,31 +127,41 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+
+    - name: Checkout action code
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      env:
+        REPO: ${{ github.action_repository }}
+        REF: ${{ github.action_ref }}
+      with:
+        repository: ${{ env.REPO }}
+        ref: ${{ env.REF }}
+        path: infra-actions
 
     - name: Prepare post-checkout steps
       if: ${{ inputs.post-checkout-steps }}
-      uses: pkgjs/action/.github/actions/prepare-dynamic-steps@v0.1.10
+      uses: ./infra-actions/.github/actions/prepare-dynamic-steps
       with:
         steps: ${{ inputs.post-checkout-steps }}
         path: post-checkout-steps
 
     - name: Prepare post-install steps
       if: ${{ inputs.post-install-steps }}
-      uses: pkgjs/action/.github/actions/prepare-dynamic-steps@v0.1.10
+      uses: ./infra-actions/.github/actions/prepare-dynamic-steps
       with:
         steps: ${{ inputs.post-install-steps }}
         path: post-install-steps
 
     - name: Prepare post-test steps
       if: ${{ inputs.post-test-steps }}
-      uses: pkgjs/action/.github/actions/prepare-dynamic-steps@v0.1.10
+      uses: ./infra-actions/.github/actions/prepare-dynamic-steps
       with:
         steps: ${{ inputs.post-test-steps }}
         path: post-test-steps
 
     - name: Setup Node.js@${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4.4.0
       with:
         node-version: ${{ matrix.node-version }}
 

.github/workflows/update-release-tag.yaml

@@ -13,7 +13,7 @@ jobs:
     steps:
     - name: Get repo HEAD ref
       id: new-tag
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea  # v7.0.1
       with:
         script: |
 
@@ -45,7 +45,7 @@ jobs:
 
     - name: Move major tag ${{ steps.new-tag.outputs.major }}
       if: ${{ steps.new-tag.outputs.major }}
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea  # v7.0.1
       with:
         script: |
 
@@ -71,7 +71,7 @@ jobs:
 
     - name: Move minor tag ${{ steps.new-tag.outputs.minor }}
       if: ${{ steps.new-tag.outputs.minor }}
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea  # v7.0.1
       with:
         script: |