use hash

Author: tkatila

.github/workflows/lib-publish.yaml

@@ -26,7 +26,7 @@ jobs:
           apt-get update -y && apt-get -y --no-install-recommends install clamav ca-certificates
           freshclam
       - name: Cache clamav databases
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: /var/lib/clamav
           key: clamav-${{ runner.os }}-${{ github.run_id }}
@@ -81,7 +81,7 @@ jobs:
           image-ref: ${{ inputs.registry }}/${{ matrix.image }}:${{ inputs.image_tag }}
           exit-code: 1
       - name: Retrieve AV database
-        uses: actions/cache/restore@v4
+        uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           name: av-database
           key: clamav-${{ runner.os }}-${{ github.run_id }}