chore: use hashed versions

Author: ovflowd

.github/workflows/create-meeting-artifacts-manual.yml

@@ -37,10 +37,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
         with:
           node-version-file: '.nvmrc'
           cache: 'npm'
@@ -57,7 +57,8 @@ jobs:
           echo "user=$user" >> $GITHUB_OUTPUT
           echo "hackmd_team_name=$hackmd_team_name" >> $GITHUB_OUTPUT
 
-      - uses: actions/create-github-app-token@v2
+      - name: Create GitHub App Token
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app-token
         with:
           app-id: ${{ secrets.BOT_ID }}
@@ -74,7 +75,7 @@ jobs:
 
       - name: Upload artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: meeting-artifacts-${{ github.event.inputs.meeting_group || 'tsc' }}
           path: |

.github/workflows/create-meeting-artifacts-scheduled.yml

@@ -35,10 +35,10 @@ jobs:
           - web-server-frameworks
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
         with:
           node-version-file: '.nvmrc'
           cache: 'npm'
@@ -55,7 +55,8 @@ jobs:
           echo "user=$user" >> $GITHUB_OUTPUT
           echo "hackmd_team_name=$hackmd_team_name" >> $GITHUB_OUTPUT
 
-      - uses: actions/create-github-app-token@v2
+      - name: Create GitHub App Token
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app-token
         with:
           app-id: ${{ secrets.BOT_ID }}
@@ -72,7 +73,7 @@ jobs:
 
       - name: Upload artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: meeting-artifacts-${{ matrix.meeting_group }}
           path: |