Pin dependencies

Author: renovate[bot]

.github/actions/deploy-tinybird/action.yml

@@ -36,7 +36,7 @@ runs:
       working-directory: ghost/core/core/server/data/tinybird
 
     - name: Send slack notification
-      uses: slackapi/slack-github-action@v2.1.1
+      uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1
       if: always()
       with:
         webhook: ${{ inputs.slack-webhook }}

.github/actions/load-docker-image/action.yml

@@ -17,7 +17,7 @@ runs:
   steps:
     - name: Download image artifact (artifact)
       if: inputs.use-artifact == 'true'
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
       with:
         name: ${{ inputs.artifact-name }}
 
@@ -34,7 +34,7 @@ runs:
 
     - name: Log in to GitHub Container Registry
       if: inputs.use-artifact == 'false'
-      uses: docker/login-action@v3
+      uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
       with:
         registry: ghcr.io
         username: ${{ github.actor }}