Is your feature request related to a problem?

Currently our company policies requires that github actions should be pinned by release commit hash.

e.g.:

The commit hash for https://github.com/actions/setup-node/releases/v4.1.0 is 39370e3970a6d050c480ffad4ff0ed4d3fdee5af. When pinning, the Action's definition would be: - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af.

Solution you'd like

The githubaction autodiscovery plugin should allow users to specify how to resolve an action version (branch, tag, release, commit)

• githubrelease should allow output in hash or name (key)
• gitbranch should allow output in hash or name (key)
• githubaction autodiscovery should accept a digest parameter

Alternatives you've considered

No response

Anything else?

No response