fix(ci): make trusted main pin explicit

Author: ReubenBond

.github/scripts/CoverageSummary.cs

@@ -13,17 +13,17 @@ namespace Orleans.Coverage;
 
 public sealed class CoverageSummaryResult
 {
-    public required long CoveredBranches { get; init; }
+    public long CoveredBranches { get; set; }
 
-    public required long CoveredLines { get; init; }
+    public long CoveredLines { get; set; }
 
-    public required int Reports { get; init; }
+    public int Reports { get; set; }
 
-    public required int SourceFiles { get; init; }
+    public int SourceFiles { get; set; }
 
-    public required long TotalBranches { get; init; }
+    public long TotalBranches { get; set; }
 
-    public required long TotalLines { get; init; }
+    public long TotalLines { get; set; }
 }
 
 public static class CoverageSummaryReader

.github/workflows/test-results.yml

@@ -67,7 +67,9 @@ jobs:
       - name: Pin trusted main
         id: trusted-main
         shell: pwsh
-        run: '"sha=$(git rev-parse HEAD)" >> $env:GITHUB_OUTPUT'
+        run: |
+          $trustedMainSha = git rev-parse HEAD
+          "sha=$trustedMainSha" >> $env:GITHUB_OUTPUT
       - name: Test coverage reporting
         shell: pwsh
         run: ./.github/scripts/test-summarize-coverage.ps1