HBX-2956 Use SHA in the github actions workflow

Author: marko-bekhta

.github/workflows/build_test.yml

@@ -9,20 +9,18 @@ jobs:
 
     steps:
     - name: Checkout PR Branch
-      uses: actions/checkout@v2
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         ref: ${{ github.event.pull_request.head.sha }}
         fetch-depth: 0
 
     - name: Setup Java 8
-      uses: actions/setup-java@v1
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: 8
-        java-package: jdk
-        architecture: x64
+        distribution: temurin
 
     - name: Build and Test
-      uses: GabrielBB/xvfb-action@v1
-      with: 
-        run: mvn clean install 
-
+      uses: GabrielBB/xvfb-action@b706e4e27b14669b486812790492dc50ca16b465 # v1.7
+      with:
+        run: mvn clean install