[ci] Pin 3rd party actions to specific hash (#7690)

[ci] Pin 3rd party actions to specific hash (#7690) #2658