Pin some workflows

Author: swissspidy

.github/workflows/lint-gherkin.yml

@@ -8,6 +8,6 @@ jobs:
     name: Lint Gherkin Feature files
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: bahmutov/npm-install@v1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: bahmutov/npm-install@20216767ca67f0f7b4d095dc5859c5700a6581cb # v1
       - run: npm run lint

templates/testing.yml

@@ -32,10 +32,10 @@ jobs:
         options: --health-cmd="mysqladmin ping" --health-interval=5s --health-timeout=2s --health-retries=3
     steps:
       - name: Check out source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2
         with:
           php-version: ${{ matrix.php-version }}
           tools: composer