Update test.yml (#47)

Pinning action to a full length commit SHA [see](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)

Author: ismisepaul

.github/workflows/test.yml

@@ -29,12 +29,12 @@ jobs:
         curl -s https://bashunit.typeddevs.com/install.sh | bash
 
     - name: Setup PHP for running a local web server
-      uses: shivammathur/setup-php@v2
+      uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401  # v2.32.0
       with:
         php-version: '8.3'
 
     - name: Cache Docker images
-      uses: ScribeMD/docker-cache@0.5.0
+      uses: ScribeMD/docker-cache@fb28c93772363301b8d0a6072ce850224b73f74e  # 0.5.0
       with:
         key: docker-${{ runner.os }}-${{ hashFiles('start-local.sh') }}