chore(gh): update wip workflow

Updates the WIP check workflow:

- Limits workflow permissions.
- Pins actions to release commit hash.

Signed-off-by: Ryan Johnson <[email protected]>

Author: tenthirtyam

.github/workflows/govmomi-check-wip.yaml

@@ -1,19 +1,7 @@
-#  Copyright (c) 2021 VMware, Inc. All Rights Reserved.
-#
-#  Licensed under the Apache License, Version 2.0 (the "License");
-#  you may not use this file except in compliance with the License.
-#  You may obtain a copy of the License at
-#
-#  http://www.apache.org/licenses/LICENSE-2.0
-#
-#  Unless required by applicable law or agreed to in writing, software
-#  distributed under the License is distributed on an "AS IS" BASIS,
-#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-#  See the License for the specific language governing permissions and
-#  limitations under the License.
+name: Check Pull Request
 
-# Perform "exit 1" if PR title starts with "WIP" to block accidental merges
-name: Check "WIP" in PR Title
+permissions:
+  contents: read
 
 on:
   pull_request:
@@ -23,5 +11,5 @@ jobs:
   wip:
     runs-on: ubuntu-latest
     steps:
-      - name: Check WIP in PR Title
-        uses: embano1/wip@v2
+      - name: Check Pull Request Title
+        uses: embano1/wip@d10268b325aea84ff49ff3f0983c0ebc14976caf # v1.0.0