chore(ci): pin action refs to branch (will update to SHA after merge)

Author: jdalton

.github/actions/setup-and-install/action.yml

@@ -46,12 +46,12 @@ runs:
         persist-credentials: false
 
     - name: Setup environment
-      uses: SocketDev/workflows/.github/actions/setup@feat/setup-and-install-workflow
+      uses: SocketDev/workflows/.github/actions/setup@feat/setup-and-install-workflow # zizmor: ignore[unpinned-uses]
       with:
         node-version: ${{ inputs.node-version }}
         socket-api-key: ${{ inputs.socket-api-key }}
 
     - name: Install dependencies
-      uses: SocketDev/workflows/.github/actions/install@feat/setup-and-install-workflow
+      uses: SocketDev/workflows/.github/actions/install@feat/setup-and-install-workflow # zizmor: ignore[unpinned-uses]
       with:
         working-directory: ${{ inputs.working-directory }}

.github/workflows/setup-and-install.yml

@@ -20,7 +20,7 @@ jobs:
   setup-and-install:
     runs-on: ubuntu-latest
     steps:
-      - uses: SocketDev/workflows/.github/actions/setup-and-install@feat/setup-and-install-workflow
+      - uses: SocketDev/workflows/.github/actions/setup-and-install@feat/setup-and-install-workflow # zizmor: ignore[unpinned-uses]
         with:
           node-version: ${{ inputs.node-version }}
           socket-api-key: ${{ secrets.SOCKET_API_KEY }} # zizmor: ignore[secrets-outside-env]