Use sha instead of version in Github actions

DMO-11038

Improved internal security by using SHA identifier instead of version in retrieving of external library for Github actions.