Merge pull request #8978 from BitGo/gokuldevaraju330/wcn-865-fix-flaky-yarn-audit-ci-step-with-retry-logic

fix(ci): pin EricCrosson/retry to exact version and SHA256 digest

Author: gokulhost

.github/workflows/npmjs-release.yml

@@ -239,7 +239,7 @@ jobs:
       - name: Install retry
         uses: BitGo/install-github-release-binary@v2
         with:
-          targets: EricCrosson/retry@v1
+          targets: EricCrosson/retry@v1.4.8:sha256-15224553f40d5d16dcc1a696798741227c79670a41f43e522002e634aa1d7c64
 
       - name: Run yarn audit
         run: retry --up-to 2x --every 3s -- yarn run audit-high --retry-on-network-failure

.github/workflows/publish.yml

@@ -39,7 +39,7 @@ jobs:
       - name: Install retry
         uses: BitGo/install-github-release-binary@v2
         with:
-          targets: EricCrosson/retry@v1
+          targets: EricCrosson/retry@v1.4.8:sha256-15224553f40d5d16dcc1a696798741227c79670a41f43e522002e634aa1d7c64
 
       - name: Audit Dependencies
         run: retry --up-to 2x --every 3s -- yarn run improved-yarn-audit --min-severity high --retry-on-network-failure