pin actions

Author: dflook

.github/workflows/test.yaml

@@ -98,7 +98,7 @@ jobs:
           ./actionlint example_workflows/*.yaml
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@f94ec6bedd8674c4426838e6b50417d36b6ab231 # v5
+        uses: astral-sh/setup-uv@f94ec6bedd8674c4426838e6b50417d36b6ab231 # v5.3.1
       - name: Actions Security Check
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -127,11 +127,11 @@ jobs:
             dflook/
 
       - name: Lint Dockerfile
-        uses: hadolint/hadolint-action@v3.1.0
+        uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0
         with:
           dockerfile: ./image/Dockerfile
 
       - name: Lint Dockerfile
-        uses: hadolint/hadolint-action@v3.1.0
+        uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0
         with:
           dockerfile: ./image/Dockerfile-base