use specific versions for the used GitHub actions

Author: Alexander Pann

.github/workflows/vulnerability-scanning.yml

@@ -17,7 +17,7 @@ jobs:
       - name: Call setup
         run: ./gradlew dependencies
       - name: Depcheck
-        uses: dependency-check/Dependency-Check_Action@main
+        uses: dependency-check/Dependency-Check_Action@3102a65fd5f36d0000297576acc56a475b0de98d
         env:
           # actions/setup-java changes JAVA_HOME, so it needs to be reset to match the depcheck image
           JAVA_HOME: /opt/jdk
@@ -29,7 +29,7 @@ jobs:
           args: >
             --exclude ${{github.workspace}}/build/mps/**
       - name: Upload Test results
-        uses: actions/upload-artifact@master
+        uses: actions/upload-artifact@v4
         with:
            name: Depcheck report
            path: ${{github.workspace}}/reports