Fix potential github action smells

[ceddy4395]

Motivation and Context

Description

Hey! 🙂 I want to contribute the following changes to your workflow:

• Use commit hash instead of tags for action versions
• Use fixed version for runs-on argument
• Avoid jobs without timeouts
• Prevent running issue/PR actions on forks
• Steps should only perform a single command
• Use names for run steps

These changes are part of a research Study at TU Delft looking at GitHub Action Smells. Find out more

Contribution Checklist

• [ ] The code builds clean without any errors or warnings
• [ ] The PR follows the SK Contribution Guidelines and the pre-submission formatting script raises no violations
• [ ] All unit tests pass, and I have added new tests where possible
• [ ] I didn't break anyone :smile:

[ceddy4395]

@microsoft-github-policy-service agree

[ceddy4395]

@RogerBarreto Here is a scientific paper and a blog post about potential security risks related to GitHub Actions

[matthewbolanos]

Going to close this out because the team has decided that we'll remove both of these actions.