chore(deps): use full commit sha to pin 3rd party actions

.github/workflows/licenced.yml

@@ -14,10 +14,10 @@ jobs:
       - uses: actions/setup-go@v4
         with:
           go-version: 1.14.1
-      - uses: jonabc/setup-licensed@v1
+      - uses: jonabc/setup-licensed@53335d677bd13ee176a37f1612fbe030c08c1d2b
         with:
           version: 2.x
-      - uses: jonabc/licensed-ci@v1
+      - uses: jonabc/licensed-ci@b092bcc641fecee0b731506cf2736d33c9f47831
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           workflow: branch

.github/workflows/releases.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Set CURRENT_TAG
         run: echo "GORELEASER_CURRENT_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v5
+        uses: goreleaser/goreleaser-action@14707cd26fbb4b6c8abf03fb8ea4eb6c59711a62
         with:
           version: latest
           args: release --clean