Merge pull request #37 from sebassem/main

Update actions

Author: sebassem

.github/workflows/deployAzGovViz.yml

@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v6.0.1
 
       - name: Connect Azure OIDC
         uses: azure/login@v2

.github/workflows/deployAzGovVizAccelerator.yml

@@ -12,13 +12,16 @@ jobs:
 
     permissions:
       id-token: write
-      contents: write
+      contents: read
 
     steps:
 
+      - name: Harden Runner
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        with:
+          egress-policy: audit
       - name: Checkout
-        uses: actions/checkout@v4
-
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v6.0.1
       - name: Login to Azure
         uses: azure/login@v2
         with: