SEC-090: Automated trusted workflow pinning (2024-04-29)

[hashicorp-tsccr[bot]]

Bumping GitHub Actions version to latest TSCCR release.

• changes in .github/workflows/community.yml
  • bump actions/download-artifact from v4.1.4 to v4.1.5 (release notes)
• changes in .github/workflows/hashicorp.yml
  • bump actions/download-artifact from v4.1.4 to v4.1.5 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/8874027391

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

Please reach out to #team-prodsec if you have any questions.

[github-actions[bot]]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.