Pin googlejavaformat-action to v4.0.0 SHA for security

Co-authored-by: SeanDuggan <2421968+SeanDuggan@users.noreply.github.com>

Author: Copilot

.github/workflows/test.yml

@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - uses: axel-op/googlejavaformat-action@v4.0.0
+      - uses: axel-op/googlejavaformat-action@c1134ebd196c4cbffb077f9476585b0be8b6afcd #v4.0.0
         with:
           args: "--set-exit-if-changed"