chore(deps): use commit id for GH action versions (#3298)

* deps(gha): use commit id for actions/setup-go version 4.1.0
* deps(gha): add comment with semver for golang/govulncheck-action
* deps(gha): upgrade actions/upload-artifact to v3.1.3
  Release notes: https://github.com/actions/upload-artifact/releases
* deps(gha): upgrade codecov-action to 3.1.4
  Release notes: https://github.com/codecov/codecov-action/releases/tag/v3.1.4

.github/workflows/code-coverage.yml

@@ -16,7 +16,7 @@ jobs:
       with:
         fetch-depth: 0
     - name: Set up Go
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
       with:
         go-version-file: 'go.mod'
         check-latest: true
@@ -24,11 +24,11 @@ jobs:
     - name: Run Tests
       run: make test-with-coverage
     - name: Upload Coverage
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
       with:
         files: coverage.txt
     - name: Upload Logs
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
       with:
         name: logs
         path: .logs/**/*.log