test(ci): pin passing action fixtures to SHAs - #138

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.