chore(deps): pin dependencies

.github/workflows/secrets-scan.yaml

@@ -10,7 +10,7 @@ jobs:
       workdirs: ${{ steps.dirs.outputs.workdirs }}
     steps:
     - name: Checkout
-      uses: actions/[email protected]
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       with:
         ref: ${{ github.head_ref }}
 
@@ -34,7 +34,7 @@ jobs:
         workdir: ${{ fromJSON(needs.filter.outputs.workdirs) }}
     steps:
     - name: Checkout
-      uses: actions/[email protected]
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       with:
         ref: ${{ github.head_ref }}
 
@@ -48,7 +48,7 @@ jobs:
         fi
 
     - name: Run Aqua Security Trivy
-      uses: aquasecurity/trivy-action@0.15.0
+      uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca # 0.16.1
       with:
         scan-type: fs
         scan-ref: ${{ matrix.workdir }}