pin github action versions

.github/workflows/weekly-e2e.yaml

@@ -12,7 +12,7 @@ jobs:
       name: crontests
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 #v3.6.0
       - name: test all examples
         continue-on-error: true
         timeout-minutes: 1440
@@ -29,7 +29,7 @@ jobs:
           sudo chmod -R a+rwX .
           sudo find . -type d -exec chmod g+s '{}' +
       - name: Commit & Push changes
-        uses: actions-js/push@master
+        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 #v1.4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           message: 'Update TestRecord'