chore: fix ratchet check errors

.github/workflows/build-and-publish-image.yml

@@ -24,17 +24,17 @@ jobs:
 
     steps:
       - name: 'Checkout repository'
-        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # v4
+        uses: 'actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8' # ratchet:actions/checkout@v5
 
       - name: 'Set up QEMU'
-        uses: 'docker/setup-qemu-action@v3'
+        uses: 'docker/setup-qemu-action@v3' # ratchet:exclude
 
       - name: 'Set up Docker Buildx'
-        uses: 'docker/setup-buildx-action@v3'
+        uses: 'docker/setup-buildx-action@v3' # ratchet:exclude
 
       - name: 'Extract metadata (tags, labels) for Docker'
         id: 'meta'
-        uses: 'docker/metadata-action@v5'
+        uses: 'docker/metadata-action@v5' # ratchet:exclude
         with:
           images: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}'
           tags: |
@@ -47,7 +47,7 @@ jobs:
       - name: 'Log in to the Container registry'
         if: |-
           ${{ github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) }}
-        uses: 'docker/login-action@v3'
+        uses: 'docker/login-action@v3' # ratchet:exclude
         with:
           registry: '${{ env.REGISTRY }}'
           username: '${{ github.actor }}'
@@ -55,7 +55,7 @@ jobs:
 
       - name: 'Build and push Docker image'
         id: 'build-and-push'
-        uses: 'docker/build-push-action@v6'
+        uses: 'docker/build-push-action@v6' # ratchet:exclude
         with:
           context: '.'
           platforms: 'linux/amd64,linux/arm64'

.github/workflows/qwen-code-pr-review.yml

@@ -48,7 +48,7 @@ jobs:
       issues: 'write'
     steps:
       - name: 'Checkout PR code'
-        uses: 'actions/checkout@v4'
+        uses: 'actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8' # ratchet:actions/checkout@v5
         with:
           token: '${{ secrets.GITHUB_TOKEN }}'
           fetch-depth: 0