chore(deps): pin dependencies

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>

Author: bootc-bot[bot]

.github/workflows/ci.yaml

@@ -20,19 +20,19 @@ jobs:
   build-test:
     name: Build+Test
     runs-on: ubuntu-latest
-    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel@sha256:393c63c7c3a1b06d31c6fa0a4f7912546f962ca24051f8aadd7e8f2106d557b8
     strategy:
       fail-fast: false
       matrix:
         os: [ubuntu-latest]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 20
       - name: Cache Dependencies
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2
       - name: cargo fmt (check)
         run: cargo fmt -- --check -l
       - name: Compile (no features)
@@ -44,7 +44,7 @@ jobs:
       - name: cargo clippy (non-gating)
         run: cargo clippy
       - name: Checkout ostree-rs-ext
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: ostreedev/ostree-rs-ext
           path: ostree-rs-ext