Pin Github action to known working hash

All update to latest version, tested building Eyedropper, looks ok

Author: fiftydinar

.github/workflows/appimage.yml

@@ -18,21 +18,21 @@ jobs:
           - runs-on: ubuntu-latest
             name: Build AppImage
             arch: x86_64
-          # comment out these 3 lines aarch64 is not wanted
+          # comment out these 3 lines if aarch64 is not wanted
           - runs-on: ubuntu-24.04-arm
             name: Build AppImage
             arch: aarch64
     container: ghcr.io/pkgforge-dev/archlinux:latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Preparing Container
         run: /bin/sh ./pre-setup.sh
       - name: Install Dependencies
         run: /bin/sh ./get-dependencies.sh
       - name: Make AppImage
         run: /bin/sh ./make-appimage.sh
       - name: Upload artifact
-        uses: actions/upload-artifact@v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: AppImage-${{ matrix.arch }}
           path: dist
@@ -43,7 +43,7 @@ jobs:
     permissions: write-all
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v4.3.0
+      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           pattern: AppImage-*
           merge-multiple: true
@@ -55,7 +55,7 @@ jobs:
           echo "VERSION=$(cat ./version)" >> "${GITHUB_ENV}"
           echo "DATE=$(date +'%Y-%m-%d_%s')" >> "${GITHUB_ENV}"
       - name: Release Artifacts
-        uses: softprops/action-gh-release@v2.2.2
+        uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2
         with:
           name: "${{ env.APPNAME }}: ${{ env.VERSION }}"
           tag_name: "${{ env.VERSION }}@${{ env.DATE }}"
@@ -66,7 +66,7 @@ jobs:
           files: |
             *.AppImage*
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Update LATEST_VERSION
         run: |
           echo "${{ env.VERSION }}" > ./LATEST_VERSION