fix: pin GitHub action to commit

Author: ironman0x7b2

.github/workflows/release.yml

@@ -28,7 +28,7 @@ jobs:
         run: sha256sum sentinelhub > ./checksums.txt
 
       - name: Upload Release Artifacts
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 #v2.3.3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           files: |

.github/workflows/test.yml

@@ -40,7 +40,7 @@ jobs:
           done
 
       - name: Upload Coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 #v5.5.1
         with:
           file: ./coverage.txt
           token: ${{ secrets.CODECOV_TOKEN }}