Merge pull request #405 from step-security-bot/stepsecurity_remediation_1740764187

[StepSecurity] ci: Harden GitHub Actions

Author: jaybuidl

.github/workflows/contracts-testing.yml

@@ -17,12 +17,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@v2.11.0
+      uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
       with:
         egress-policy: audit
 
     - name: Setup Node.js environment
-      uses: actions/setup-node@v4.2.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version: 18.x
 
@@ -32,10 +32,10 @@ jobs:
     - name: Set Yarn version to Berry
       run: yarn set version 4.2.2
 
-    - uses: actions/checkout@v4.2.2
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     - name: Cache node modules
-      uses: actions/cache@v4.2.2
+      uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
       env:
         cache-name: cache-node-modules
       with:
@@ -66,7 +66,7 @@ jobs:
       working-directory: contracts
 
     - name: Upload a build artifact
-      uses: actions/upload-artifact@v4.6.1
+      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
       with:    
         name: code-coverage-report    
         path: contracts/coverage