Pin 3rd party actions to commit sha

[shih]

Issue #, if available:

Description of changes: To fix the semgrep failures

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.