add SHA for checkout

Author: cornelcroi

.github/workflows/npm-publish.yml

@@ -10,7 +10,7 @@ jobs:
   build-and-publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@6ccd57f4c5d15bdc2fef309bd9fb6cc9db2ef1c6
       - uses: actions/setup-node@v3
         with:
           node-version: 20