chore: pin GitHub Actions to commit SHA

Author: quentin-laplanche-docker

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
           - ""
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Shellcheck
       env:
         GH_TOKEN: ${{ github.token }}
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Install rootless
       env:
         GH_TOKEN: ${{ github.token }}

.github/workflows/diff.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Diff stable
         env: