chore: pin yamllint, golangci-lint

[ramonpetgrave64]

pins the yaml-lint and golangci-lint dependency used in pre-submits.

This is to fix code-scanning alerts about unpinned dependencies

• https://github.com/slsa-framework/slsa-verifier/security/code-scanning/8
• https://github.com/slsa-framework/slsa-verifier/security/code-scanning/21

Testing Process

The pre-submit test that uses yamllint and golangci-lint passes

[ramonpetgrave64]

@ianlewis