Add SHA pins for GitHub Actions dependencies (#1862)