build: use pinned action versions

Author: ReuDa

.github/workflows/ci.yml

@@ -16,7 +16,7 @@ concurrency:
 
 jobs:
   extension-ci:
-    uses: steadybit/extension-kit/.github/workflows/reusable-extension-ci.yml@main
+    uses: steadybit/extension-kit/.github/workflows/reusable-extension-ci.yml@main # NOSONAR githubactions:S7637 - our own action
     with:
       go_version: '1.24'
       build_linux_packages: false

.github/workflows/cla.yml

@@ -7,6 +7,6 @@ on:
 
 jobs:
   call-workflow:
-    uses: steadybit/.github/.github/workflows/cla.yml@main
+    uses: steadybit/.github/.github/workflows/cla.yml@main # NOSONAR githubactions:S7637 - our own action
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN_USED_BY_CLA_FROM_ANSGAR }}

.github/workflows/ghcr-cleanup.yml

@@ -7,6 +7,6 @@ on:
 
 jobs:
   ghcr-cleanup:
-    uses: steadybit/extension-kit/.github/workflows/reusable-ghcr-cleanup.yml@main
+    uses: steadybit/extension-kit/.github/workflows/reusable-ghcr-cleanup.yml@main # NOSONAR githubactions:S7637 - our own action
     secrets:
       token: ${{ secrets.GHCR_CLEANUP_PAT }}