chore(ci): Update and pin actions steps

.github/workflows/security-scan.yml

@@ -23,7 +23,7 @@ jobs:
         echo "go-version=$(cat .go-version)" >> "$GITHUB_OUTPUT"
 
     - name: Set up Go
-      uses: actions/setup-go@d0a58c1c4d2b25278816e339b944508c875f3613 # v3.4.0
+      uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
       with:
         go-version: "${{ steps.get-go-version.outputs.go-version }}"
 
@@ -73,7 +73,7 @@ jobs:
         repository: "$PWD"
 
     - name: Upload SARIF file
-      uses: github/codeql-action/upload-sarif@e00cd12e3ee0ce24d476645336a315351be51d88  # TSCCR: actions in subdirectories not yet supported: upload-sarif
+      uses: github/codeql-action/upload-sarif@168b99b3c22180941ae7dbdd5f5c9678ede476ba # v2
       with:
         sarif_file: results.sarif