chore: use action hash instead of tag reference

Author: fdaugan

.github/workflows/build.yml

@@ -10,7 +10,7 @@ jobs:
     name: Build and analyze
     runs-on: ubuntu-latest
     steps:
-      - uses: s4u/setup-maven-action@v1.12.0
+      - uses: s4u/setup-maven-action@6c4e9964d4ecb8f1026310cd8618791fd51a8016
         with:
           checkout-fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
           java-version: 21
@@ -19,7 +19,7 @@ jobs:
           cache-prefix: ${{ runner.os }}-sonar
           maven-version: 3.9.6
       - name: maven-settings-xml-action
-        uses: whelk-io/maven-settings-xml-action@v22
+        uses: whelk-io/maven-settings-xml-action@9dc09b23833fa9aa7f27b63db287951856f3433d
         with:
           repositories: '[
                   { "id": "spring-milestone", "url": "https://repo.spring.io/milestone/"},