[StepSecurity] ci: Harden GitHub Actions

[step-security-bot]

Summary

This pull request is created by StepSecurity at the request of @berndgassmann. Please merge the Pull Request to incorporate the requested changes. Please tag @berndgassmann on your message if you have any questions related to the PR.

Security Fixes

Pinned Dependencies

GitHub Action tags and Docker tags are mutatble. This poses a security risk. GitHub's Security Hardening guide recommends pinning actions to full length commit.

• GitHub Security Guide
• The Open Source Security Foundation (OpenSSF) Security Guide

Feedback

For bug reports, feature requests, and general feedback; please email support@stepsecurity.io. To create such PRs, please visit https://app.stepsecurity.io/securerepo.

Signed-off-by: StepSecurity Bot bot@stepsecurity.io

---

This change is 

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (4cc1d6b) 82.00% compared to head (53ab65e) 82.00%.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## master #147 +/- ## ======================================= Coverage 82.00% 82.00% ======================================= Files 268 268 Lines 34820 34820 Branches 6404 6404 ======================================= Hits 28553 28553 Misses 805 805 Partials 5462 5462 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.