[SEC-7924] chore: pin third-party GitHub Actions to commit SHAs (#131)

Pin all third-party GitHub Actions to full-length commit SHAs to prevent
supply chain attacks. Addresses findings from the
third-party-action-not-pinned-to-commit-sha Semgrep rule.

Author: pkaeding

.github/workflows/ci.yml

@@ -114,7 +114,7 @@ jobs:
         with:
           name: targets
           path: targets
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1
         with:
           ruby-version: '2.7'
       - name: Prepare RubyGems / ffi

.github/workflows/release.yml

@@ -79,7 +79,7 @@ jobs:
       matrix:
         repo: ['api-client-go', 'api-client-java', 'api-client-python', 'api-client-ruby', 'api-client-typescript']
     steps:
-      - uses: ncipollo/release-action@v1.14.0
+      - uses: ncipollo/release-action@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5 # v1.14.0
         with:
           repo: ${{ matrix.repo }}
           token: ${{ secrets.BOT_TOKEN }}