ci(security): pin codecov-action to commit SHA

Author: elkaix

.github/workflows/ci-pythinker-cli.yml

@@ -93,7 +93,7 @@ jobs:
         run: make cov-pythinker-code
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # pinned from v5.5.4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage.xml

.github/workflows/ci-pythinker-core.yml

@@ -60,7 +60,7 @@ jobs:
         run: make cov-pythinker-core
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # pinned from v5.5.4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: packages/pythinker-core/coverage.xml

.github/workflows/ci-pythinker-host.yml

@@ -116,7 +116,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: matrix.runner == 'ubuntu-22.04'
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # pinned from v5.5.4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: packages/pythinker-host/coverage.xml

.github/workflows/ci-pythinker-sdk.yml

@@ -60,7 +60,7 @@ jobs:
         run: make cov-pythinker-sdk
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # pinned from v5.5.4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: sdks/pythinker-sdk/coverage.xml