chore(ci): enforce zero trust for third party workflows

[heitorlessa]

Issue number: #2207

Summary

Remove allow_list from workflow that enforces 3rd party actions to be pinned. Addressed shellcheck issues that weren't identified earlier due to being in allow list.

Changes

Please provide a summary of what's being changed

User experience

Please share what the user experience looks like before and after this change

Checklist

If your change doesn't seem to apply, please leave them unchecked.

• Meet tenets criteria
• I have performed a self-review of this change
• Changes have been tested
• Changes are documented
• PR title follows conventional commit semantics

Is this a breaking change?

RFC issue number:

Checklist:

• Migration process documented
• Implement warnings (if it can live side by side)

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

[leandrodamascena]

I haven't checked the hash of the images if it matches the version informed, but it all looks great to me.

[leandrodamascena]

[heitorlessa]

testing nudge before merging

Sent from Neat