ci: Update GitHub Actions used in CI

In particular, update the actions/checkout Action that we are using in
most workflows, because the version we have been using so far uses the
deprecated 'save-state' command and should stop working soon [0].

[0] https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

Signed-off-by: Quentin Monnet <quentin@isovalent.com>
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index a477258..7fcda86 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -28,7 +28,7 @@
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
         with:
           submodules: true
 
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 433afb1..9e62830 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -22,12 +22,12 @@
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
         with:
           submodules: recursive
 
       - name: Build bpftool container image
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 # v4.0.0
         with:
           push: false
           tags: bpftool:latest
@@ -39,6 +39,6 @@
           docker run --rm --privileged --pid=host bpftool map
 
       - name: Lint Docker image
-        uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf
+        uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0
         with:
           dockerfile: Dockerfile
diff --git a/.github/workflows/lint-commits.yaml b/.github/workflows/lint-commits.yaml
index 5056ab2..8220313 100644
--- a/.github/workflows/lint-commits.yaml
+++ b/.github/workflows/lint-commits.yaml
@@ -13,7 +13,7 @@
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # v2.4.0
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/lint-shell.yaml b/.github/workflows/lint-shell.yaml
index dd7ddd9..b1ef29e 100644
--- a/.github/workflows/lint-shell.yaml
+++ b/.github/workflows/lint-shell.yaml
@@ -19,9 +19,9 @@
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
 
       - name: Run ShellCheck
-        uses: ludeeus/action-shellcheck@94e0aab03ca135d11a35e5bfc14e6746dc56e7e9
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0
         with:
           scandir: './scripts'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 50b8829..66d8667 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -43,7 +43,7 @@
           tar -xvf "${{ env.LLVM }}.tar.xz"
 
       - name: Checkout bpftool code
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
         with:
           submodules: recursive
           # Create a new directory to avoid wiping out LLVM on bpftool checkout
@@ -129,7 +129,7 @@
           sha256sum "${archive_arm64}" > "${archive_arm64}.sha256sum"
 
       - name: Checkout bpftool and libbpf code
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
         with:
           submodules: recursive
           path: 'bpftool'
diff --git a/.github/workflows/static-build.yaml b/.github/workflows/static-build.yaml
index 3333094..db7df44 100644
--- a/.github/workflows/static-build.yaml
+++ b/.github/workflows/static-build.yaml
@@ -36,7 +36,7 @@
           tar -xvf "${{ env.LLVM_PATH }}.tar.xz"
 
       - name: Checkout bpftool
-        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
+        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
         with:
           submodules: recursive
           # Create a new directory to avoid wiping out LLVM on bpftool checkout