use SHA for GH Actions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: lantoli

.github/workflows/generate-augmented-sbom.yml

@@ -40,7 +40,7 @@ jobs:
         run: ./scripts/compliance/gen-ssdlc-report.sh
 
       - name: Upload augmented SBOM as artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
         with:
           name: augmented_sbom_and_ssdlc_report
           path: |