Build Pipeline Pinning

Check that build dependencies and CI actions are pinned to immutable versions.

• check
• security