[CI] fix GA workflows (openvinotoolkit#2726)

### Changes

- use correct hash for 
- remove unused permissions: attestations: write

.github/workflows/api_changes_check.yml

@@ -25,7 +25,7 @@ jobs:
       issues: write
     steps:
       - name: Download built HTML doc as artifact from previous step
-        uses: alehechka/download-tartifact@a055d3a102b9ed9cfff1263bc713295047d0197e # v2
+        uses: alehechka/download-tartifact@1195216b256562056097b175df17b167557f8681 # v2
         with:
           name: html_doc_artifact
       - name: Checkout latest doc_pages branch tip

.github/workflows/build_and_publish_doc.yml

@@ -23,17 +23,15 @@ jobs:
   publish:
     needs: [call-build-html-doc, call-build-schema-page]
     runs-on: ubuntu-20.04
-    permissions:
-      attestations: write
     steps:
       - name: Checkout main repo  # the github-pages-deploy-action seems to require this step
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
       - name: Download HTML doc build artifact
-        uses: alehechka/download-tartifact@a055d3a102b9ed9cfff1263bc713295047d0197e # v2
+        uses: alehechka/download-tartifact@1195216b256562056097b175df17b167557f8681 # v2
         with:
           name: html_doc_artifact
       - name: Download schema doc build artifact
-        uses: alehechka/download-tartifact@a055d3a102b9ed9cfff1263bc713295047d0197e # v2
+        uses: alehechka/download-tartifact@1195216b256562056097b175df17b167557f8681 # v2
         with:
           name: schema_doc_artifact
           path: html_build/html

.github/workflows/post_pr_merge.yml

@@ -19,8 +19,6 @@ on:
 
 jobs:
   upload-coverage-common:
-    permissions:
-      attestations: write
     if: github.event.pull_request.merged == true
     uses: ./.github/workflows/upload_coverage_for_develop.yml
     with:
@@ -31,8 +29,6 @@ jobs:
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   upload-coverage-onnx:
-    permissions:
-      attestations: write
     if: github.event.pull_request.merged == true
     uses: ./.github/workflows/upload_coverage_for_develop.yml
     with:
@@ -43,8 +39,6 @@ jobs:
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   upload-coverage-openvino:
-    permissions:
-      attestations: write
     if: github.event.pull_request.merged == true
     uses: ./.github/workflows/upload_coverage_for_develop.yml
     with:

.github/workflows/precommit.yml

@@ -14,8 +14,6 @@ on:
 jobs:
   common:
     runs-on: ubuntu-20.04
-    permissions:
-      attestations: write
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with:
@@ -44,8 +42,6 @@ jobs:
           flags: COMMON
   onnx:
     runs-on: ubuntu-20.04-8-cores
-    permissions:
-      attestations: write
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with:
@@ -73,8 +69,6 @@ jobs:
           flags: ONNX
   openvino:
     runs-on: ubuntu-20.04-8-cores
-    permissions:
-      attestations: write
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with: