[cicd] ensure github actions use hash instead of versions

[codeboten]

Component(s)

No response

Describe the issue you're reporting

This is already done in other collector repos, we should follow the same policy for this repo.

[mowies]

i'd like to work on this, pls assign me :)

[mowies]

@codeboten PR should be ready