feat: pin foreign action SHA

Signed-off-by: Oskar Manhart <[email protected]>

Author: oskardotglobal

.github/workflows/ci.yaml

@@ -13,11 +13,11 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: crusty-pie/toolchain@v1
+      - uses: crusty-pie/toolchain@b64d5758e6a4951bc7fabec0634ab9638886388a
         with:
           toolchain: nightly
           components: clippy
 
-      - uses: crusty-pie/clippy@v1
+      - uses: crusty-pie/clippy@f9bc3956d0bdf4c532bb77c0e9c11d5ee6b527e0
         with:
           args: --all-features