Pin actions/github-script to exact commit SHA (#259)

Signed-off-by: shreyah963 <shreyab963@gmail.com>

Author: shreyah963

.github/workflows/add-untriaged.yml

@@ -11,7 +11,7 @@ jobs:
   apply-label:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             github.rest.issues.addLabels({