Pin GitHub Actions to commit SHAs

Author: hduelme

.github/workflows/main.yml

@@ -11,8 +11,8 @@ jobs:
       matrix:
         java: [8, 17, 21, 25, 26]
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-java@v5
+      - uses: actions/checkout@checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           distribution: 'zulu'
           java-version: ${{ matrix.java }}