Pin actions to commit SHAs for security

Agent-Logs-Url: https://github.com/githubnext/agentic-ops/sessions/6b8ae639-def8-4619-b2e5-8fba1778b57f

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -8,10 +8,10 @@ jobs:
   compile:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up gh-aw CLI
-        uses: github/gh-aw-actions/setup-cli@v1
+        uses: github/gh-aw-actions/setup-cli@f8495a686e66770ae977f82732f34d7340ee42a4 # v0.71.4
         with:
           gh_token: ${{ secrets.GITHUB_TOKEN }}