security: pin release action to v2.5.0 strict SHA

Author: dandye

.github/workflows/release-google-secops.yml

@@ -17,6 +17,6 @@ jobs:
           zip -r ../../google-secops.zip . -x "TOOL_MAPPING.md"
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
         with:
           files: google-secops.zip