workflows: Includes version comments in GH action uses-lines

[sumanth8495]

Fixes #2439

Description of the changes being introduced by the pull request:

• Includes version comments in GH action uses-lines

Please verify and check that the pull request fulfills the following
requirements:

• The code follows the Code Style Guidelines
• Tests have been added for the bug fix or new feature
• Docs have been added for the bug fix or new feature

[jku]

The version number in my example was meant as an example, not as the value that every action should have.

So when you did this:

actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v2.3.4

I was expecting to see the version number for actions/checkout that matches f43a0e5. This is visible in e.g. https://github.com/actions/checkout/releases/: v3.6.0

theupdateframework/specification/.github/workflows/check-latest-spec-version.yml@master is a special case that I should have mentioned: no need to comment that one with a release

[jku]

Thanks, looks pretty good. Looks like you figured out the codeql versioning which always baffles me...

I found two potential bugs and a couple of missing version comments -- I'd like at least the bugs to be fixed before merging.

[jku]

Looks great, thanks for your persistence!