chore: pin actions to commit SHA

.github/workflows/android.yml

@@ -19,8 +19,8 @@ jobs:
       group: ${{ github.ref }}-android
       cancel-in-progress: true
     steps:
-      - uses: oven-sh/setup-bun@v2
-      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install dependencies
         shell: bash
@@ -31,7 +31,7 @@ jobs:
         run: bun install
         working-directory: example
 
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
           distribution: 'zulu'
           java-version: '17'
@@ -51,7 +51,7 @@ jobs:
         working-directory: example
 
       - name: Create AVD and generate snapshot for caching
-        uses: reactivecircus/android-emulator-runner@v2
+        uses: reactivecircus/android-emulator-runner@1dcd0090116d15e7c562f8db72807de5e036a4ed # v2.34.0
         with:
           # Use the slimmer aosp_atd images for working
           # around "System UI isn't responding" ANR
@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: E2E Report
           path: |
@@ -87,7 +87,7 @@ jobs:
             ~/.maestro/tests/**/*
 
       - name: Store tests result
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: e2e_android_report
           path: |

.github/workflows/ios.yml

@@ -20,8 +20,8 @@ jobs:
       group: ${{ github.ref }}-ios
       cancel-in-progress: true
     steps:
-      - uses: oven-sh/setup-bun@v2
-      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install dependencies
         shell: bash
@@ -34,7 +34,7 @@ jobs:
 
       - name: Cache Pods
         id: cache-pods
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         env:
           cache-name: cached-ios-pods-deps
         with:

.github/workflows/main.yml

@@ -19,10 +19,10 @@ jobs:
 
     steps:
       - name: Set up Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install dependencies
         shell: bash