Add Bazel build validation to CI workflow

[mmorel-35]

Description

Add Bazel build validation to CI workflow.
Also pin other github actions with their versions documented in a comment

[wu-sheng]

The action bazel-contrib/setup-bazel@4fd964a is not allowed in apache/skywalking-data-collect-protocol

Note this. ASF has a version approval mechanism. You can't use a random version in ASF CI.

[mmorel-35]

Is there a validation process for bazel-contrib/setup-bazel action ? Or do you prefer a scripted installation for bazel ?

The use of the sha is a security recommend'ation provided by OSSF. Usually it is taken from the release page see for example in
bazel-contrib/[email protected] , the same logic is applied for other actions

[wu-sheng]

I didn't know this part. But in ASF Infra, it has an approval scope of actions. @kezhenxu94 Do you know where we could check for that list?

[kezhenxu94]

https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml here is the source of truth for allowed GHA

[mmorel-35]

Thanks, I created apache/infrastructure-actions#419