Add pinning for remaining GHA actions

Run-GHA: True
Required-githooks: true
Skip-build: true
Skip-test: true
Skip-unit-tests: true

Signed-off-by: Margaret Lawson <mlawsonca@google.com>

Author: mlawsonca

.github/workflows/gcp-weekly.yml

@@ -17,7 +17,7 @@ on:
 
   # schedule:
   #     # temporarily run more frequently so we can validate it works
-  #     - cron: "15 * * * *" # runs at minute 15 of every hour of every day
+  #     - cron: "0 12 * * 6" # runs every Saturday at 12pm (UTC)
 
 # shouldn't need this, should only ever have one running at a time. But just in case
 concurrency:
@@ -345,7 +345,7 @@ jobs:
       - name: Publish test results
         if: (!cancelled()) && (success() || failure()) &&
             steps.run-test.outcome != 'skipped'
-        uses: EnricoMi/publish-unit-test-result-action@v2
+        uses: EnricoMi/publish-unit-test-result-action@170bf24d20d201b842d7a52403b73ed297e6645b  # v2.18.0
         with:
           check_name: ${{ env.STAGE_NAME }} Test Results (old)
           github_token: ${{ secrets.GITHUB_TOKEN }}
@@ -365,7 +365,7 @@ jobs:
           name: ${{ env.STAGE_NAME }} test-results
           path: ${{ env.STAGE_NAME }}/**/results.xml
       - name: Update commit status
-        uses: ouzi-dev/commit-status-updater@v2
+        uses: ouzi-dev/commit-status-updater@26588d166ff273fc4c0664517359948f7cdc9bf1  # v2.0.2
         with:
           # yamllint disable-line rule:line-length
           name: 'test/Functional on ${{ env.DISTRO_NAME }} ${{ env.COMMIT_STATUS_DISTRO_VERSION && env.COMMIT_STATUS_DISTRO_VERSION || env.DISTRO_VERSION }}'
@@ -527,7 +527,7 @@ jobs:
           name: ${{ env.STAGE_NAME }} test-results
           path: ${{ env.STAGE_NAME }}/**/results.xml
       - name: Update commit status
-        uses: ouzi-dev/commit-status-updater@v2
+        uses: ouzi-dev/commit-status-updater@26588d166ff273fc4c0664517359948f7cdc9bf1  # v2.0.2
         with:
           name: 'test/Functional Hardware ${{ matrix.stage }}'
           status: "${{ job.status }}"