Update workflows to use SHA (#153)

Author: cx-bruno-silva

.github/workflows/publish.yml

@@ -10,12 +10,12 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
-    - uses: haya14busa/action-update-semver@v1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
+    - uses: haya14busa/action-update-semver@7d2c558640ea49e798d46539536190aff8c18715 #v1.5.1
       with:
         major_version_tag_only: true
     - name: Create a Release
-      uses: actions/create-release@v1
+      uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e #v1.1.4
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
       with:

.github/workflows/test_action.yaml

@@ -8,7 +8,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
       - run: mkdir -p myoutput
       - name: Test KICS action
         uses: ./