From 5032bd01ae395b83bfed958657b2bb4661f197a0 Mon Sep 17 00:00:00 2001
From: "aikido-autofix[bot]"
 <119856028+aikido-autofix[bot]@users.noreply.github.com>
Date: Fri, 11 Sep 2026 00:55:32 +0000
Subject: [PATCH 1/2] fix(security): autofix 3rd party Github Actions should be
 pinned

---
 .github/workflows/build.yml | 2 +-
 .github/workflows/check.yml | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 29b3635..73d9b3b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: setup pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - name: Setup node
         uses: actions/setup-node@v7
         with:
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 353b796..ffd763a 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -25,14 +25,14 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: setup pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - name: Setup node
         uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: pnpm
       - name: Install
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
         with:
           components: clippy, rustfmt
       - name: Install dependencies
@@ -264,7 +264,7 @@ jobs:
         run: ls -R .
         shell: bash
       - name: Test bindings
-        uses: tj-actions/docker-run@v2
+        uses: tj-actions/docker-run@1d25a677da8f1243a138dc5db21e307e92986ffe # v2.2.1
         env:
           AIC_SDK_LICENSE: ${{ secrets.AIC_SDK_LICENSE }}
         with:

From 9aeabcc567520f5a64adedeb680db04d96ab7e40 Mon Sep 17 00:00:00 2001
From: Corvin Jaedicke <c.jaedicke@me.com>
Date: Wed, 23 Sep 2026 16:11:25 +0200
Subject: [PATCH 2/2] fix(ci): pin all remaining pnpm and Rust toolchain
 invocations

---
 .github/workflows/check.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index ffd763a..2a847ce 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -101,14 +101,14 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: setup pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - name: Setup node
         uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: pnpm
       - name: Install
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
         with:
           toolchain: stable
           targets: ${{ matrix.settings.target }}
@@ -196,7 +196,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: setup pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - name: Setup node
         uses: actions/setup-node@v7
         with:
@@ -235,7 +235,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: setup pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - name: Setup node
         uses: actions/setup-node@v7
         with:
@@ -283,7 +283,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: setup pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - name: Setup node
         uses: actions/setup-node@v7
         with: