Upgrade test actions and use SHA pinning

Author: flwyd

.github/workflows/tests.yaml

@@ -24,13 +24,13 @@ jobs:
       with:
         access_token: ${{ github.token }}
 
-    - uses: actions/setup-go@v3
+    - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b #v5.4.0
       with:
         go-version: ${{ matrix.go-version }}
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
 
     - name: Cache go modules
-      uses: actions/cache@v3
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 #v4.2.3
       with:
         path: |
           ~/.cache/go-build
@@ -43,4 +43,4 @@ jobs:
 
     - name: Upload coverage to Codecov
       if: ${{ matrix.update-coverage }}
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 #v3.1.6