Lock actions in CI (#2829)

* update dockerfile

* lock actions

* remove dockerhub

* fix golangci-lint install in ci image

.github/workflows/testing-git.yml

@@ -14,22 +14,17 @@ jobs:
     container:
       image: ghcr.io/jguer/yay-builder:latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/cache@v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: ~/go/pkg/mod
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
-      - uses: actions/cache@v3
-        with:
-          path: /home/runner/work/yay/yay/pacman-git
-          key: ${{ runner.os }}-pacman-${{ hashFiles('/home/runner/work/yay/yay/pacman-git/PKGBUILD') }}
-          restore-keys: |
-            ${{ runner.os }}-pacman-
       - name: checkout pacman-git
         run: |
-          git -C ./pacman-git pull || git clone https://aur.archlinux.org/pacman-git
+          rm -rf pacman-git
+          git clone --depth=1 https://aur.archlinux.org/pacman-git
           useradd github
           echo 'github ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers
           chmod -R 777 pacman-git