Pin setup-docker-action to commit sha

Author: ppawlowski

.github/workflows/docker-build.yaml

@@ -21,7 +21,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Docker
-        uses: docker/setup-docker-action@v4
+        uses: docker/setup-docker-action@e43656e248c0bd0647d3f5c195d116aacf6fcaf4 #v4.7.0
         with:
           daemon-config: |
             {
@@ -33,9 +33,6 @@ jobs:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
 
-      # - name: Set up Docker Buildx
-      #   uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
-
       - name: Build Docker image
         uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
         with:
@@ -48,18 +45,6 @@ jobs:
           build-args: |
             NODE_VERSION=${{ matrix.node }}
 
-      # - name: Build Docker image for SAST scan
-      #   uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
-      #   with:
-      #     context: .
-      #     file: docker/Dockerfile
-      #     platforms: linux/amd64
-      #     load: true
-      #     tags: flowfuse-device-agent-pr:${{ matrix.node }}-scan
-      #     push: false
-      #     build-args: |
-      #       NODE_VERSION=${{ matrix.node }}
-
       - name: Perform SAST scan
         uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
         with: