fix: pin 10 unpinned action(s),extract 6 unsafe expression(s) to env vars

fix: pin 10 unpinned action(s),extract 6 unsafe expression(s) to env vars #3936