Backport of SEC-090: Automated trusted workflow pinning (2024-09-01) into release/0.17.x

Backport of SEC-090: Automated trusted workflow pinning (2024-09-01) into release/0.17.x #5191