Hash pin GitHub Actions

[hugovk]

Done using https://github.com/suzuki-shunsuke/pinact, which did all except for the fuzzers:

❯ pinact run
ERROR failed to handle a line: action can't be pinned
.github/workflows/cifuzz.yml:38
      uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
ERROR failed to handle a line: action can't be pinned
.github/workflows/cifuzz.yml:45
      uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master

Shall we pin them to the latest 4c0e105abd10caa29391edb4a0fad3db25eeade4?

• https://github.com/google/oss-fuzz/commits/master/
• google/oss-fuzz@4c0e105

[radarhere]

Shall we pin them to the latest 4c0e105abd10caa29391edb4a0fad3db25eeade4?

Sounds good to me.

[hugovk]

They just made a new commit on https://github.com/google/oss-fuzz/commit so I put that one :)

We also don't need the Zizmor unpinned-uses exception any more.