Update GitHub Actions workflow versioning with hashes and dependabot support

[LucaGuerra]

Currently we don't have a standard for selecting GitHub actions versions. In some repos we have started using the following format:

    steps:
    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

Which is the current best practice. Also, we are starting to enable dependabot becasue upgrading those deps manually is not practical.

This issue tracks our work to get all repos to the same standard

Below we have the list of core repositories, as we should complete those:

• [ ] falcosecurity/charts
• [ ] falcosecurity/deploy-kubernetes
• [ ] falcosecurity/falco
  • WARNING: before you try to enable dependabot in Falco, please note that there are some actions that CANNOT be upgraded because they must use an older container to ensure compatibility (there is a specific comment for that)
• [ ] falcosecurity/falco-website
• [ ] falcosecurity/falcoctl
• [ ] falcosecurity/libs
• [ ] falcosecurity/plugin-sdk-go
• [ ] falcosecurity/plugins
• [ ] falcosecurity/rules

cc @cpanato

[cpanato]

/assign

[cpanato]

• [x] falcosecurity/charts
• [x] falcosecurity/deploy-kubernetes
• [ ] falcosecurity/falco
• [x] falcosecurity/falco-website
• [x] falcosecurity/falcoctl : https://github.com/falcosecurity/falcoctl/pull/385
• [ ] falcosecurity/libs
• [ ] falcosecurity/plugin-sdk-go
• [ ] falcosecurity/plugins
• [ ] falcosecurity/rules

[poiana]

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale