ci: migrate runs-on to Twilio runner labels + SHA-pin actions

Author: charlottestjohn

.github/workflows/pr-lint.yml

@@ -6,9 +6,9 @@ on:
 jobs:
   validate:
     name: Validate title
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-large
     steps:
-      - uses: amannn/action-semantic-pull-request@v4
+      - uses: amannn/action-semantic-pull-request@505e44b4f33b4c801f063838b3f053990ee46ea7  # v4
         with:
           types: chore docs fix feat test misc
         env:

.github/workflows/test-and-deploy.yml

@@ -13,17 +13,17 @@ on:
 jobs:
   test:
     name: Test
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-large
     timeout-minutes: 20
     strategy:
       matrix:
         java: [ 8, 11, 17 ]
     steps:
       - name: Checkout smtpapi-java
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5  # v2
 
       - name: Set up Java
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@91d3aa4956ec4a53e477c4907347b5e3481be8c9  # v2
         with:
           distribution: 'temurin'
           java-version: ${{ matrix.java }}
@@ -39,13 +39,13 @@ jobs:
     name: Deploy
     if: success() && github.ref_type == 'tag'
     needs: [ test ]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-large
     steps:
       - name: Checkout smtpapi-java
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5  # v2
 
       - name: Set up Sonatype Maven
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@91d3aa4956ec4a53e477c4907347b5e3481be8c9  # v2
         with:
           java-version: 8
           distribution: temurin
@@ -59,7 +59,7 @@ jobs:
         run: make install
 
       - name: Create GitHub Release
-        uses: sendgrid/dx-automator/actions/release@main
+        uses: sendgrid/dx-automator/actions/release@08b601b726671445abc798ed59881766ec8fefc6  # main
         with:
           assets: smtpapi-java.jar
           footer: '**[Maven](https://mvnrepository.com/artifact/com.sendgrid/smtpapi-java/${version})**'
@@ -74,17 +74,17 @@ jobs:
         run: mvn clean deploy -DskipTests=true -B -U -Prelease
 
       - name: Submit metric to Datadog
-        uses: sendgrid/dx-automator/actions/datadog-release-metric@main
+        uses: sendgrid/dx-automator/actions/datadog-release-metric@08b601b726671445abc798ed59881766ec8fefc6  # main
         env:
           DD_API_KEY: ${{ secrets.DATADOG_API_KEY }}
 
   notify-on-failure:
     name: Slack notify on failure
     if: failure() && github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || github.ref_type == 'tag')
     needs: [ test, deploy ]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-large
     steps:
-      - uses: rtCamp/action-slack-notify@v2
+      - uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58  # v2
         env:
           SLACK_COLOR: failure
           SLACK_ICON_EMOJI: ':github:'

.github/workflows/update-dependencies.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   update-dependencies-and-test:
     name: Update Dependencies & Test
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-large
     timeout-minutes: 20
     strategy:
       max-parallel: 1
@@ -17,10 +17,10 @@ jobs:
 
     steps:
       - name: Checkout smtpapi-java
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5  # v2
 
       - name: Set up Java
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@91d3aa4956ec4a53e477c4907347b5e3481be8c9  # v2
         with:
           distribution: 'temurin'
           java-version: ${{ matrix.java }}
@@ -33,7 +33,7 @@ jobs:
 
       - name: Add & Commit
         if: matrix.java == '17'
-        uses: EndBug/add-and-commit@v8.0.2
+        uses: EndBug/add-and-commit@72e246094f1af94def5a07467cd789c503ae8be0  # v8.0.2
         env:
           GITHUB_TOKEN: ${{ secrets.SG_JAVA_GITHUB_TOKEN }}
         with:
@@ -45,9 +45,9 @@ jobs:
     name: Slack notify on failure
     if: failure()
     needs: [ update-dependencies-and-test ]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-large
     steps:
-      - uses: rtCamp/action-slack-notify@v2
+      - uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58  # v2
         env:
           SLACK_COLOR: failure
           SLACK_ICON_EMOJI: ':github:'