[StepSecurity] ci: Harden GitHub Actions #8

	# Vulnerability details at https://securitylab.github.com/advisories/GHSL-2023-271_changed-files/
	name: "Changed-Files Vulnerability: Without Harden-Runner"

	on:
	pull_request:
	branches:
	- main

	permissions:
	pull-requests: read

	jobs:
	changed_files:
	runs-on: ubuntu-latest
	name: Test changed-files
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	with:
	fetch-depth: 0

	# Example 1
	- name: Get changed files
	id: changed-files
	uses: tj-actions/changed-files@56284d80811fb5963a972b438f2870f175e5b7c8 # v40.2.3

	- name: List all changed files
	run: \|
	for file in ${{ steps.changed-files.outputs.all_changed_files }}; do
	echo "$file was changed"
	done

Provide feedback