[DEVI-254] Pin external actions libs into correct shas#2

userqjin merged 1 commit intomainabnormal-security/protoconf:mainfrom

qjin/pr/DEVI-254-protoconfabnormal-security/protoconf:qjin/pr/DEVI-254-protoconfCopy head branch name to clipboard