Replace GH action versions with SHA1 for build.yml

Author: yruslan

.github/workflows/build.yml

@@ -15,7 +15,7 @@ on:
 
 jobs:
   build-sbt:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     strategy:
       fail-fast: false
       matrix:
@@ -35,23 +35,14 @@ jobs:
     name: Spark ${{matrix.spark}} on Scala ${{matrix.scala}}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6.0.2
+        # gh api repos/actions/checkout/commits/v6.0.2 --jq '.sha'
+        uses: actions/checkout@vde0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Setup JDK
-        uses: actions/setup-java@v5.1.0
+        # gh api repos/actions/setup-java/commits/v5.0.1 --jq '.sha'
+        uses: gh api repos/actions/setup-java/commits/v5.1.0 --jq '.sha'
         with:
           distribution: temurin
           java-version: 8
           cache: sbt
-      - name: Install sbt
-        run: | 
-          sudo apt-get update
-          sudo apt-get install apt-transport-https curl gnupg -yqq
-          echo "deb https://repo.scala-sbt.org/scalasbt/debian all main" | sudo tee /etc/apt/sources.list.d/sbt.list
-          echo "deb https://repo.scala-sbt.org/scalasbt/debian /" | sudo tee /etc/apt/sources.list.d/sbt_old.list
-          curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x2EE0EA64E40A89B84B2DF73499E82A75642AC823" | sudo -H gpg --no-default-keyring --keyring gnupg-ring:/etc/apt/trusted.gpg.d/scalasbt-release.gpg --import
-          sudo chmod 644 /etc/apt/trusted.gpg.d/scalasbt-release.gpg
-          sudo apt-get update
-          sudo apt-get install sbt
-
       - name: Build and run tests
         run: sbt ++${{matrix.scala}} test -DSPARK_VERSION=${{matrix.spark}}