Pin GitHub Actions to SHA1 for supply chain security (#131)

Author: wennergr

.github/workflows/speakeasy_sdk_generation.yml

@@ -15,7 +15,7 @@ permissions:
         - cron: 0 0 * * *
 jobs:
     generate:
-        uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@v15
+        uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@f09110c4676497cba7ef85034a6fb94191f1c417 # v15
         with:
             force: ${{ github.event.inputs.force }}
             mode: pr

.github/workflows/speakeasy_sdk_publish.yml

@@ -7,7 +7,7 @@ name: Publish
             - RELEASES.md
 jobs:
     publish:
-        uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@v15
+        uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@f09110c4676497cba7ef85034a6fb94191f1c417 # v15
         secrets:
             github_access_token: ${{ secrets.GITHUB_TOKEN }}
             pypi_token: ${{ secrets.PYPI_TOKEN }}