[CI] [GHA] Set actions references to specific commit hash; provide explicit top level token permissions for jobs #814

	name: History CUDA
	on:
	push:
	paths:
	- 'modules/nvidia_plugin/**'
	pull_request:
	paths:
	- 'modules/nvidia_plugin/**'
	- '.github/workflows/history_cuda.yml'

	permissions: read-all

	jobs:
	history:
	runs-on: ubuntu-22.04
	steps:
	- name: checkout master branch
	uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
	with:
	ref: master
	fetch-depth: 0
	- name: delete temporary branch
	run: git branch -D temporary-ci-branch \| echo 1
	- name: fetch
	run: git fetch origin $GITHUB_REF:temporary-ci-branch
	- name: rebased
	run: git merge-base --is-ancestor origin/master temporary-ci-branch
	- name: autosquashed
	run: "! git rev-list --pretty=oneline -E --grep '^(fixup\|squash\|amend)!' origin/master..temporary-ci-branch \| fgrep !"

Provide feedback