chore: pin GitHub Actions to commit SHA (#294)

-e
Signed-off-by: Quentin Laplanche <quentin.laplanche@docker.com>

Author: quentin-laplanche-docker

.github/workflows/extension.yml

@@ -10,7 +10,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3

.github/workflows/prompts-docker.yml

@@ -11,7 +11,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           submodules: false
 

.github/workflows/test-extension.yml

@@ -12,7 +12,7 @@ jobs:
         working-directory: src/extension/ui
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - run: npm install
       - run: npm run build
       - run: npm run test