fix(CI): use sha for actions

Signed-off-by: Carl Schwan <carlschwan@kde.org>

Author: CarlSchwan

.github/workflows/profile.yml

@@ -43,7 +43,7 @@ jobs:
           --health-retries=5
     steps:
       - name: Set up php${{ matrix.php-version }}
-        uses: shivammathur/setup-php@master
+        uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # v2.35.5
         with:
           php-version: ${{ matrix.php-version }}
           extensions: ctype,curl,dom,gd,iconv,intl,json,mbstring,openssl,pdo_mysql,posix,sqlite,xml,zip
@@ -53,7 +53,7 @@ jobs:
       - name: Install Nextcloud
         run: php -f nextcloud/occ maintenance:install --database-host 127.0.0.1 --database-name nextcloud --database-user nextcloud --database-pass nextcloud --admin-user admin --admin-pass admin --database mysql
       - name: Checkout app
-        uses: actions/checkout@master
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           path: nextcloud/apps/suspicious_login
       - name: Install dependencies