DEVOPS-1133: Pin version to hash

[RomFloreani]

DEVOPS-1133 - pin all GitHub actions and reusable workflows to hash

[Copilot]

Pull request overview

Pins all referenced reusable GitHub workflows from MiraGeoscience/CI-tools to an immutable commit SHA (matching v3 / v3.9.1) to reduce supply-chain risk and improve build reproducibility.

Changes:

• Updated Zizmor security scan reusable workflow references to a commit hash.
• Updated Python analysis and deploy reusable workflow references to a commit hash.
• Updated JIRA automation reusable workflow references to a commit hash.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/security_scan.yml	Pins Zizmor reusable workflows to a specific CI-tools commit SHA.
.github/workflows/python_deploy_prod.yml	Pins production Python release reusable workflows to a specific CI-tools commit SHA.
.github/workflows/python_deploy_dev.yml	Pins development Python publish reusable workflows to a specific CI-tools commit SHA.
.github/workflows/python_analysis.yml	Pins Python static analysis and pytest reusable workflows to a specific CI-tools commit SHA.
.github/workflows/pr_jira_actions.yml	Pins PR→JIRA reusable workflow to a specific CI-tools commit SHA.
.github/workflows/issue_to_jira.yml	Pins issue→JIRA reusable workflow to a specific CI-tools commit SHA.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.