Pin SonarSource action to a specific git hash (#618)

Author: swebb2066

.github/workflows/sonarcloud.yml

@@ -55,7 +55,7 @@ jobs:
           sudo apt-get install -y libapr1-dev libaprutil1-dev
 
       - name: Install Build Wrapper
-        uses: SonarSource/sonarqube-scan-action/install-build-wrapper@v6.0.0
+        uses: SonarSource/sonarqube-scan-action/install-build-wrapper@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 #v7.0.0
         env:
           SONAR_HOST_URL: ${{ env.SONAR_SERVER_URL }}
 
@@ -84,7 +84,7 @@ jobs:
             -o "$BaseDir/build/coverage.xml"
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v6.0.0
+        uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 #v7.0.0
         env:
           SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
           SONAR_HOST_URL: ${{ env.SONAR_SERVER_URL }}