diff --git a/.github/actions/smoke-tests/action.yml b/.github/actions/smoke-tests/action.yml
index 5d6a5b22..2413d51a 100644
--- a/.github/actions/smoke-tests/action.yml
+++ b/.github/actions/smoke-tests/action.yml
@@ -34,7 +34,7 @@ inputs:
 runs:
     using: 'composite'
     steps:
-        - uses: dorny/paths-filter@v3
+        - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
           id: filter
           with:
               filters: |
diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index 4aa36e6f..3e2ff54f 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -35,7 +35,7 @@ jobs:
                 new-arch: [true, false]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
             - name: Verify 16KB alignment
               run: |
@@ -43,7 +43,7 @@ jobs:
                   bash scripts/verify-elf-16k.sh
 
             - name: Use Node.js 20.x
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: 20.x
                   cache: npm
@@ -52,7 +52,7 @@ jobs:
                       examples/sdk/reactNative/package-lock.json
 
             - name: Use Java 17
-              uses: actions/setup-java@v4
+              uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
               with:
                   distribution: temurin
                   java-version: 17
@@ -93,7 +93,7 @@ jobs:
                   sudo udevadm trigger --name-match=kvm
 
             - name: AVD cache
-              uses: actions/cache@v4
+              uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
               id: avd-cache
               with:
                   path: |
@@ -103,7 +103,7 @@ jobs:
 
             - name: Create AVD snapshot for caching
               if: steps.avd-cache.outputs.cache-hit != 'true'
-              uses: reactivecircus/android-emulator-runner@v2
+              uses: reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d # v2.38.0
               with:
                   api-level: ${{ matrix.api-level }}
                   arch: ${{ matrix.arch }}
@@ -114,7 +114,7 @@ jobs:
                   script: echo "Generated AVD snapshot for caching."
 
             - name: Capture a native crash, single APK then Play-style split install, a fatal JS error and a render error on the emulator
-              uses: reactivecircus/android-emulator-runner@v2
+              uses: reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d # v2.38.0
               env:
                   BUNDLETOOL_JAR: ${{ runner.temp }}/bundletool.jar
               with:
@@ -132,7 +132,7 @@ jobs:
 
             - name: Upload crash evidence
               if: failure()
-              uses: actions/upload-artifact@v4
+              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
               with:
                   name: native-crash-api${{ matrix.api-level }}-${{ matrix.arch }}-newarch-${{ matrix.new-arch }}
                   path: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 352708ae..d6e848c3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,9 +19,9 @@ jobs:
                 node-version: [20.x]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
             - name: Use Node.js ${{ matrix.node-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: ${{ matrix.node-version }}
             - run: npm ci
@@ -52,8 +52,8 @@ jobs:
         runs-on: ${{ matrix.os }}
 
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/setup-node@v4
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: 20.x
             - run: npm ci
@@ -72,8 +72,8 @@ jobs:
         continue-on-error: true
 
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/setup-node@v4
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: 20.x
             - run: npm ci
@@ -103,15 +103,15 @@ jobs:
                 node-version: [16.x, 18.x]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
             - name: Build using Node.js ${{ matrix.build-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: ${{ matrix.build-version }}
             - run: npm ci
             - run: npm run build
             - name: Test using Node.js ${{ matrix.node-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: ${{ matrix.node-version }}
             - run: npm test
@@ -133,15 +133,15 @@ jobs:
                 node-version: [14.x]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
             - name: Build using Node.js ${{ matrix.build-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: ${{ matrix.build-version }}
             - run: npm ci
             - run: npm run build
             - name: Test using Node.js ${{ matrix.node-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: ${{ matrix.node-version }}
             - run: npm i -g npm@8
@@ -164,15 +164,15 @@ jobs:
                 node-version: [18.x, 20.x]
 
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
             - name: Use Node.js ${{ matrix.node-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: ${{ matrix.build-version }}
             - run: npm ci
             - run: npm run build
             - name: Test using Node.js ${{ matrix.node-version }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: ${{ matrix.node-version }}
             - run: npm test