fix: Pin all GitHub Actions to specific commit SHAs

- Pin actions/checkout to v4.1.7
- Pin actions/setup-python to v5.2.0
- Pin actions/cache to v4.1.0
- Pin docker/setup-buildx-action to v3.7.1
- Pin docker/build-push-action to v6.9.0

This should resolve the CI failures by ensuring consistent action versions.

Author: dguido

.github/workflows/docker-image.yaml

@@ -22,7 +22,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349  # v3.7.1
 
       - name: Log in to the Container registry
         uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567  # v3.3.0

.github/workflows/main.yml

@@ -11,18 +11,18 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@v5.1.0
+      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3  # v5.2.0
         with:
           python-version: '3.11'
           cache: 'pip'
 
       - name: Cache shellcheck
         id: cache-shellcheck
-        uses: actions/cache@v4
+        uses: actions/cache@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2  # v4.1.0
         with:
           path: /snap/bin/shellcheck
           key: ${{ runner.os }}-shellcheck
@@ -54,17 +54,17 @@ jobs:
       matrix:
         UBUNTU_VERSION: ["22.04"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@v5.1.0
+      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3  # v5.2.0
         with:
           python-version: '3.11'
           cache: 'pip'
 
       - name: Cache LXD images
-        uses: actions/cache@v4
+        uses: actions/cache@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2  # v4.1.0
         with:
           path: /var/snap/lxd/common/lxd/images
           key: ${{ runner.os }}-lxd-${{ matrix.UBUNTU_VERSION }}
@@ -130,17 +130,17 @@ jobs:
       matrix:
         UBUNTU_VERSION: ["22.04"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@v5.1.0
+      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3  # v5.2.0
         with:
           python-version: '3.11'
           cache: 'pip'
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349  # v3.7.1
 
       - name: Install dependencies
         env:
@@ -175,7 +175,7 @@ jobs:
           sudo -E ./tests/pre-deploy.sh
 
       - name: Build Docker image with cache
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75  # v6.9.0
         with:
           context: .
           tags: local/algo