Use SHA to reference GitHub Actions

[xalopp]

Type of PR

• Bugfix
• New Feature
• Other (explain):

Fixes Issues reported by SonarQube:
https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions

Breaking changes

• Yes, this is a breaking change

Beside simply using the SHA for the versions, this also updates some of the GitHub Actions

Description

I use https://github.com/suzuki-shunsuke/pinact for is PR.

[xalopp]

@mmoll please 👀 this PR

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (93dad05) to head (d1a353b).
⚠️ Report is 1 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@             Coverage Diff             @@
##              master      #227   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity       147       147           
===========================================
  Files              8         8           
  Lines            669       669           
===========================================
  Hits             669       669           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[mmoll]

merged, merci @xalopp!