There should be a commit hash check that ensures nothing uses tag and uses only commit hash

[antedotee]

I have noticed most of the workflows uses commit hash while some doesn't. It would be good if we use a commit hash check that ensures everything uses commit hash. Also, ideally, there will be a script and a file containing centralized commit hashes.

[antedotee]

@khanhtc1202 I would like to hear your thoughts on this.

[khanhtc1202]

Seem good, can you help open an PR for this

[khanhtc1202]

Also, I'm not sure about the script and file that contains all the commit hash would look like. So better to make it a separated PR and we could discuss based on the poc.