The openSSF scorecard report warns that the github actions are not
pinned by hash.

This PR aims at improving this by pinning the auto-assign.yaml workflow by hash.

Signed-off-by: harshitasao <harshitasao@gmail.com>

The openSSF scorecard report warns that the github workflows are not pinned by hash.

This PR aims at improving this by pinning the github workflows by hash.

Signed-off-by: harshitasao <harshitasao@gmail.com>

The openSSF scorecard report warns that the github actions are not pinned by hash.

This PR aims at improving this by pinning the github actions by hash.

Signed-off-by: harshitasao <harshitasao@gmail.com>

…encies

ci: pin auto-assign dependencies

…ndencies

ci: github action pin dependencies

…ependencies

ci: github workflows pin dependencies

The jobs to detect the ceph and csi versions now can have
custom annotationso and labels added to them. They are
very short-lived jobs, but they may need custom annotations
in some environments to run.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>

As we have new csi-addons v0.9.0
updating the same here as well.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>

updating cephcsi image to 3.12.0
release.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>

csi: update csi-addons to v0.9.0

core: Add annotations and labels to detect version jobs

Fix a github action hash version pin typo that causes canary jobs to not
run.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>

ci: fix gh action hash pin typo