ci: pin GitHub Actions to commit SHAs (FE-4376) (#155)

Co-authored-by: Chester Sim <chester@lumencollective.xyz>

Author: ChesterSim

.github/workflows/build.yml

@@ -26,7 +26,7 @@ jobs:
         CARGO_DRIFT_FFI_PATH: /usr/lib
     steps:
       - name: Check out
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
       - name: Config rust toolchain
@@ -35,7 +35,7 @@ jobs:
           rustup show active-toolchain
       - name: Format
         run: cargo fmt --all -- --check
-      - uses: ubicloud/rust-cache@v2
+      - uses: ubicloud/rust-cache@65b3ff06b9bcc69d88c25e212f1ae3d14a0953c3 # v2
         with:
           path: |
             ~/.cargo/registry/index/

.github/workflows/on-sdk-update.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubicloud
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Load drift-rs version
       run: |
@@ -19,7 +19,7 @@ jobs:
         sed -i '/^drift-rs/s/tag = ".*"/tag = "'$SDK_VERSION'"/' Cargo.toml
 
     - name: Install Rust toolchain
-      uses: actions-rs/toolchain@v1
+      uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
       with:
         profile: minimal
         toolchain: stable

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - name: Check out
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
       - name: Build image