fix: pin 6 unpinned action(s),extract 1 unsafe expression(s) to env vars

fix: pin 6 unpinned action(s),extract 1 unsafe expression(s) to env vars #3465