Use commit SHAs for GH-CI action versions

Author: grandchild

.github/workflows/installer-builder-installer.yml

@@ -9,11 +9,11 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
 
     - name: Cache dependencies
       id: cache
-      uses: actions/cache@v2
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684  # v4.2.3
       with:
         path: |
           ~/go/pkg/mod
@@ -38,7 +38,7 @@ jobs:
       run: make self-installer
 
     - name: Upload
-      uses: actions/upload-artifact@v2.2.2
+      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08  # v4.6.0
       with:
         name: setup-installer-builder
         path: .release/setup-installer-builder