chore(ci): Pin GitHub Actions to commit SHAs

[semgrep-zcs-prod-semgrep]

Summary

Pins 2 GitHub Actions reference(s) to full commit SHAs to prevent supply-chain attacks.

Automated by the Semgrep pin-github-actions workflow

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}