Fix potential github action smells

[ceddy4395]

Description

Hey! 🙂 I want to contribute the following changes to your workflow:

• Avoid jobs without timeouts
• Use commit hash instead of tags for action versions
• Use names for run steps
• Avoid workflows without comments
• Avoid incorrectly indented workflows
• Steps should only perform a single command
• Avoid installing packages without version

(These changes are part of a research Study at TU Delft looking at GitHub Action Smells. Find out more)

Checklist

• [ ] I fully tested it as developer / designer and created unit / integration tests
• [ ] I documented it (or no need to document or I will create a separate documentation issue)

How to test it?

Please describe how this can be tested by the test engineers if it is not already explicit - or remove this section if no need to description.

[CLAassistant]

All committers have signed the CLA.

[sturlath]

https://ceddy4395.github.io/research/research/gha-smells.html 404 File not found

[ceddy4395]

The info page is: https://ceddy4395.github.io/research/gha-smells.html