From c81fc15342e1f2d94b18f8f92c27732e2084c948 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kacper=20Ro=C5=BCniata?=
 <56474758+krozniata@users.noreply.github.com>
Date: Wed, 16 Jul 2025 08:13:30 +0200
Subject: [PATCH] chore: pin actions to commit SHA

---
 .github/workflows/android.yml | 12 ++++++------
 .github/workflows/ios.yml     |  6 +++---
 .github/workflows/main.yml    |  4 ++--
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index b753c68c..ab4c7e7f 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -19,8 +19,8 @@ jobs:
       group: ${{ github.ref }}-android
       cancel-in-progress: true
     steps:
-      - uses: oven-sh/setup-bun@v2
-      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install dependencies
         shell: bash
@@ -31,7 +31,7 @@ jobs:
         run: bun install
         working-directory: example
 
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
           distribution: 'zulu'
           java-version: '17'
@@ -51,7 +51,7 @@ jobs:
         working-directory: example
 
       - name: Create AVD and generate snapshot for caching
-        uses: reactivecircus/android-emulator-runner@v2
+        uses: reactivecircus/android-emulator-runner@1dcd0090116d15e7c562f8db72807de5e036a4ed # v2.34.0
         with:
           # Use the slimmer aosp_atd images for working
           # around "System UI isn't responding" ANR
@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: E2E Report
           path: |
@@ -87,7 +87,7 @@ jobs:
             ~/.maestro/tests/**/*
 
       - name: Store tests result
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: e2e_android_report
           path: |
diff --git a/.github/workflows/ios.yml b/.github/workflows/ios.yml
index 1d232589..7cbf53c0 100644
--- a/.github/workflows/ios.yml
+++ b/.github/workflows/ios.yml
@@ -20,8 +20,8 @@ jobs:
       group: ${{ github.ref }}-ios
       cancel-in-progress: true
     steps:
-      - uses: oven-sh/setup-bun@v2
-      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install dependencies
         shell: bash
@@ -34,7 +34,7 @@ jobs:
 
       - name: Cache Pods
         id: cache-pods
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         env:
           cache-name: cached-ios-pods-deps
         with:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6f4e9044..68dec58c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -19,10 +19,10 @@ jobs:
 
     steps:
       - name: Set up Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install dependencies
         shell: bash