CICD-13444 Pin GitHub Actions to approved SHAs (main)

[AleksanderOlszewski]

Pin GitHub Actions to approved SHAs

This PR was generated by pin_actions_in_repos.py to replace tag-pinned
Actions with their approved SHA equivalents from the
Collibra Actions allow-list.

Changed files

• .github/workflows/build.yml

Each uses: line is updated to pin the full commit SHA, with the original
tag preserved as a comment for human readability.

---

Ticket: CICD-13444

[svc-snyk-github-jira]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[sonarqube-collibra]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[sindoc]

Well, done. Feel free to issue PRs to me around the templating of governance reports so I can integrate them accordingly. In my case, Markdowm or XML would be okay.