Security: pin GitHub Actions to SHA hashes (#551)

Replaces mutable tag/branch references with immutable SHA hashes
to prevent supply chain attacks (ref: TeamPCP/Trivy March 2026).

Actions left as tags: 0

Co-authored-by: Codacy Security Bot <security-bot@codacy.com>

Merge pull request #543 from codacy/upload-sourceid-CF-1813

feature: Upload sourceId when available CF-1813

Merge pull request #544 from codacy/fix-metrics

Fix metrics tests

Revert user change dockerfile (#540)

revert user changes in dockerfile

add analysisCli as member of docker group (#539)

* add user analysisCli first
* add docker group afterwards

Merge pull request #538 from codacy/add-group-analysisCli

fix: add docker group to analysisCli user

Merge pull request #537 from codacy/hotfix/high

feat: support for high severity

Fix filtered jar pattern match (#536)

Update workspace path of built jar (#535)

* Fix workspace path

* Update sonatype central timeout

Update workspace path of built jar (#535)

* Fix workspace path

* Update sonatype central timeout