fix: pin SHA for checkout action

Author: clementb49

.github/workflows/build_app.yml

@@ -35,7 +35,7 @@ jobs:
           $installed = "${{ github.workspace }}\vcpkg\installed\arm64-windows"
           echo "OPENSSL_DIR=$installed" >> $env:GITHUB_ENV
       - name: checkout repository
-        uses: actions/checkout@v6
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
         with:
           fetch-depth: 0
           path: ${{ github.workspace }}/repo

.github/workflows/codeql.yml

@@ -53,7 +53,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
 
     # Add any setup steps before running the `github/codeql-action/init` action.
     # This includes steps like installing compilers or runtimes (`actions/setup-node`

.github/workflows/copilot-setup-steps.yml

@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
       - name: setup uv
         uses: "astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57"
       - name: install dev dependencies

.github/workflows/localization.yml

@@ -23,7 +23,7 @@ jobs:
       contents: read
     steps:
       - name: checkout repository
-        uses: actions/checkout@v6
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
       - name: setup uv
         uses: "astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57"
       - name: Install dependencies

.github/workflows/ruff.yml

@@ -10,6 +10,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout repository
-        uses: actions/checkout@v6
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
       - name: run ruff
         uses: "astral-sh/ruff-action@4919ec5cf1f49eff0871dbcea0da843445b837e6"

.github/workflows/update_localization.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout repository
-        uses: actions/checkout@v6
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
       - name: download previous translation template from successful CI run
         shell: bash
         env: