migrate tag-based references to commit SHA-based references for github workflows (#30509)

webapp/channels/.github/workflows/performance-benchmarks.yml

@@ -21,14 +21,14 @@ jobs:
           - 5432:5432
     steps:
       - name: Check out web app
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: 16.10.0
 
       - name: Download and install Cypress
-        uses: cypress-io/github-action@v5
+        uses: cypress-io/github-action@108b8684ae52e735ff7891524cbffbcd4be5b19f # v6.7.16
         with:
           runTests: false
           working-directory: e2e/cypress
@@ -56,7 +56,7 @@ jobs:
             mv client-original/products mattermost/client/products
           fi
       - name: Run the E2E tests
-        uses: cypress-io/github-action@v5
+        uses: cypress-io/github-action@108b8684ae52e735ff7891524cbffbcd4be5b19f # v6.7.16
         with:
           browser: chrome
           config: video=true,videosFolder=tests/videos
@@ -72,28 +72,28 @@ jobs:
           MM_TEAMSETTINGS_ENABLEOPENSERVER: true
       - name: Upload Cypress logs
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: Cypress logs
           path: e2e/cypress/tests/integration/performance/logs/
           retention-days: 3
       - name: Upload Mattermost logs
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: Mattermost logs
           path: e2e/cypress/mattermost/logs/mattermost.log
           retention-days: 3
       - name: Upload screenshots
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: Test screenshots
           path: e2e/cypress/tests/screenshots
           retention-days: 3
       - name: Upload videos
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: Test Videos
           path: e2e/cypress/tests/videos