Tag a Version and use the sha this to pin ci workflows

[stbischof]

Problem description

All projects in that Organization should have a reproducible build.
we have to pin the workflows of subproject to a hash and not only to main branche.

Preferred solution

we should tag a version and use its hash in all subprojects

Are you interested in contributing a solution yourself?

Yes

Alternatives you've considered

none

Anything else?

No response