fix: pin 17 unpinned action(s),extract 7 unsafe expression(s) to env vars

fix: pin 17 unpinned action(s),extract 7 unsafe expression(s) to env vars #2438