feat: add script context logging (#26)

<!-- markdownlint-disable MD041 -->
## 💌 Description

- add script context logging
- ci maintenance: pin sha

## 🔗 Related issue

<!-- If your PR refers to a related issue, link it here. -->
Fixes: #

## 📚 Type of change

<!-- Mark with an `x` all the checkboxes that apply (like `[x]`) -->

- [ ] 📝 Examples / docs / tutorials
- [ ] 🐛 Bug fix (non-breaking change which fixes an issue)
- [x] 🥂 Improvement (non-breaking change which improves an existing
feature)
- [x] ✨ New feature (non-breaking change which adds functionality)
- [ ] 💥 Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] 🚨 Security fix
- [ ] ⬆️ Dependencies update

## ✔️ Checklist

<!-- Mark with an `x` all the checkboxes that apply (like `[x]`) -->

- [x] I've read the [`Code of
Conduct`](https://github.com/raven-actions/.workflows/blob/main/.github/CODE_OF_CONDUCT.md)
document.
- [x] I've read the
[`Contributing`](https://github.com/raven-actions/.workflows/blob/main/.github/CONTRIBUTING.md)
guide.

---------

Signed-off-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com>

Author: DariuszPorowski

.github/linters/.cspell.yml

@@ -15,3 +15,5 @@ words:
   - codespell
   - MYENVPREFIX
   - stefanzweifel
+  - SMEE
+  - smee

.github/workflows/ci.yml

@@ -45,10 +45,10 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Detect changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         id: changes
         with:
           filters: |
@@ -59,7 +59,7 @@ jobs:
 
       - name: actionlint
         if: ${{ steps.changes.outputs.gh-workflows == 'true' }}
-        uses: raven-actions/actionlint@v2
+        uses: raven-actions/actionlint@3a24062651993d40fed1019b58ac6fbdfbf276cc # v2.0.1
         with:
           flags: "-ignore SC2086"
 
@@ -74,7 +74,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Debug Action (inputs)
         id: debug
@@ -117,7 +117,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Debug Action
         uses: ./

.github/workflows/release-draft.yml

@@ -18,21 +18,20 @@ jobs:
       pull-requests: read
     runs-on: ubuntu-latest
     steps:
-      - name: Get GitHub App Token
-        uses: wow-actions/use-app-token@v2
+      - name: Get Token
+        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
         id: get-token
         with:
-          app_id: ${{ secrets.ORG_BOT_APP_ID }}
-          private_key: ${{ secrets.ORG_BOT_PRIVATE_KEY }}
-          fallback: ${{ github.token }}
+          app-id: ${{ secrets.ORG_BOT_APP_ID }}
+          private-key: ${{ secrets.ORG_BOT_PRIVATE_KEY }}
 
       - name: Run Release Drafter
-        uses: release-drafter/release-drafter@v6
+        uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
         id: release-drafter
         with:
           prerelease: true
         env:
-          GITHUB_TOKEN: ${{ steps.get-token.outputs.BOT_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.get-token.outputs.token }}
 
       - name: Get Release URL
         run: |

.github/workflows/release.yml

@@ -21,24 +21,23 @@ jobs:
       contents: write
     runs-on: ubuntu-latest
     steps:
-      - name: Get GitHub App Token
-        uses: wow-actions/use-app-token@v2
+      - name: Get Token
+        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
         id: get-token
         with:
-          app_id: ${{ secrets.ORG_BOT_APP_ID }}
-          private_key: ${{ secrets.ORG_BOT_PRIVATE_KEY }}
-          fallback: ${{ github.token }}
+          app-id: ${{ secrets.ORG_BOT_APP_ID }}
+          private-key: ${{ secrets.ORG_BOT_PRIVATE_KEY }}
 
       - name: Update release to the latest
         id: gh-release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2.3.2
         with:
           prerelease: false
-          token: ${{ steps.get-token.outputs.BOT_TOKEN }}
+          token: ${{ steps.get-token.outputs.token }}
 
       - name: Update the major tag to include the ${{ env.TAG_NAME }} changes
         id: update-major-tag
-        uses: actions/publish-action@v0.3.0
+        uses: actions/publish-action@f784495ce78a41bac4ed7e34a73f0034015764bb # v0.3.0
         with:
           source-tag: ${{ env.TAG_NAME }}
-          token: ${{ steps.get-token.outputs.BOT_TOKEN }}
+          token: ${{ steps.get-token.outputs.token }}

.lycheeignore

@@ -7,3 +7,4 @@ https://github.com/marketplace/actions/publish-and-tag
 https://github.com/raven-actions/test/releases/v1.2.3
 
 https://aquasecurity.github.io/trivy-repo/deb
+https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...v$RESOLVED_VERSION

action.yml

@@ -44,7 +44,7 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: actions/github-script@v7
+    - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       if: ${{ always() }}
       with:
         script: |
@@ -80,6 +80,11 @@ runs:
             core.info(jsonLogOutput(envVars, false))
           })
 
+          // script context
+          await core.group(groupHeader('Script (context)'), async () => {
+            core.info(jsonLogOutput(context, false))
+          })
+
           // github context
           await core.group(groupHeader('GitHub (github context)'), async () => {
             core.info(jsonLogOutput(process.env.ACTION_DUMP_CONTEXT_GITHUB))
@@ -256,7 +261,7 @@ runs:
         ACTION_DUMP_CONTEXT_NEEDS: ${{ inputs.needs-context }}
         ACTION_DUMP_CONTEXT_INPUTS: ${{ inputs.inputs-context }}
 
-    - uses: actions/github-script@v7
+    - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       if: ${{ inputs.smee == 'true' }}
       id: smee
       with: