fixed the token-permission and pinned-dependencies issue

[harshitasao]

/area CI

What this PR does / why we need it:
fixed the token-permission and pinned-dependencies issue which are reported by scorecard.

Which issue(s) this PR fixes:
Part of #3297

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

None

[FedeDP]

/milestone 0.39.0

[FedeDP]

/approve

[poiana]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: FedeDP, harshitasao

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [FedeDP]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[poiana]

LGTM label has been added.

Git tree hash: b23686b642e23ec0fd0ddab9830f650f75d1b07d

[FedeDP]

/unhold

[FedeDP]

cc @sgaist care to re-review? :D

[sgaist]

@FedeDP AFAICT, there's still the uses: falcosecurity/testing@32e319ae505fb330ae74db4502e605a5e517ff22 line that you wanted reverted that is still present. Did you change your mind about it ?

[FedeDP]

@sgaist i double checked and it seems reverted to me! Am I missing anything? 😆

[sgaist]

My bad, I mixed that with the actions-github-release version.

[FedeDP]

This PR broke master CI triggering :/ don't know why.