Pin nginxinc/compliance-rules action to c903bfe

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/codeql-analysis.yml

@@ -26,6 +26,6 @@ jobs:
       actions: read # for github/codeql-action/init to get workflow details
       contents: read # for actions/checkout to fetch code
       security-events: write # for github/codeql-action/autobuild to send a status report
-    uses: nginxinc/compliance-rules/.github/workflows/codeql.yml@v0.1
+    uses: nginxinc/compliance-rules/.github/workflows/codeql.yml@c903bfe6c668eaba362cde6a7882278bc1564401 # v0.1
     with:
       requested_languages: go,javascript-typescript

.github/workflows/mend.yml

@@ -32,7 +32,7 @@ permissions:
 jobs:
   mend:
     if: ${{ github.event.repository.fork == false }}
-    uses: nginxinc/compliance-rules/.github/workflows/mend.yml@v0.1
+    uses: nginxinc/compliance-rules/.github/workflows/mend.yml@c903bfe6c668eaba362cde6a7882278bc1564401 # v0.1
     secrets: inherit
     with:
       product_name: nginx-gateway-fabric_${{ github.ref_name }}