chore: pin GH actions to commit sha

[c3y1huang]

Pin GH Actions to commit sha

longhorn/longhorn#12841
https://github.com/rancher/rancher-security/issues/1617

Summary by CodeRabbit

• Chores
  • Updated build pipeline configurations to use pinned commit versions for third-party actions, improving build consistency and reliability.

[coderabbitai]

📝 Walkthrough

Walkthrough

GitHub Actions workflow updated to pin third-party action versions to specific commit SHAs instead of floating major version tags, affecting actions/checkout, codecov/codecov-action, docker/setup-qemu-action, docker/setup-buildx-action, and docker/login-action.

Changes

Cohort / File(s)	Summary
GitHub Actions Version Pinning .github/workflows/build.yml	Updated third-party action references to use specific commit SHA versions instead of floating major version tags (v3/v4) for five actions: checkout, codecov, docker/setup-qemu, docker/setup-buildx, and docker/login.

Estimated Code Review Effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 Actions pinned with SHA precision,
No floating tags to cause derision!
Stable workflows, clear as day,
Reproducibility hops to stay! 🎯

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The PR title 'chore: pin GH actions to commit sha' accurately summarizes the main change: pinning GitHub Actions to specific commit SHAs instead of floating version tags.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}