All deployment options
- [Deploy build 2796 of `security-hq` to CODE](https://riffraff.gutools.co.uk/deployment/deployAgain?project=security-hq&build=2796&stage=CODE&updateStrategy=MostlyHarmless&action=deploy)
- [Deploy parts of build 2796 to CODE by previewing it first](https://riffraff.gutools.co.uk/preview/yaml?project=security-hq&build=2796&stage=CODE&updateStrategy=MostlyHarmless)
- [What's on CODE right now?](https://riffraff.gutools.co.uk/deployment/history?projectName=security-hq&stage=CODE)
What does this change?
This PR versions the actions by commit SHA, where applicable.
What is the value of this?
This is more secure, as per our recommendations.
Will this require CloudFormation and/or updates to the AWS StackSet?
Will this require changes to config?
Any additional notes?