ci: try pinning

Author: danielroe

.github/workflows/dependency-review.yml

@@ -13,6 +13,6 @@ permissions:
 
 jobs:
   check-provenance:
-    uses: nuxt/.github/.github/workflows/dependency-review.yml@main
+    uses: nuxt/.github/.github/workflows/dependency-review.yml@24a72f836050b01991052633f959d7b343610f73
     with:
       fail-on-provenance-change: true