diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 166bc780..cfbf4db0 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs Prettier Formatter
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs cSpell Spell Checker
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs Markdown Linter
@@ -48,7 +48,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs ESLint
diff --git a/.github/workflows/deploy-preview.yml b/.github/workflows/deploy-preview.yml
index c46c6952..60752fa3 100644
--- a/.github/workflows/deploy-preview.yml
+++ b/.github/workflows/deploy-preview.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4 # v4
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile
diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml
index 7e7836d3..be5d8cc4 100644
--- a/.github/workflows/deploy-prod.yml
+++ b/.github/workflows/deploy-prod.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           persist-credentials: false # <--- checking this in commit context
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile
diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml
index 48bcb049..35fa5892 100644
--- a/.github/workflows/deploy-staging.yml
+++ b/.github/workflows/deploy-staging.yml
@@ -27,7 +27,7 @@ jobs:
         with:
           ref: "${{ github.event.inputs.ref }}"
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile
diff --git a/.github/workflows/playwright.yaml b/.github/workflows/playwright.yaml
index 26f6cb0e..9c9908e7 100644
--- a/.github/workflows/playwright.yaml
+++ b/.github/workflows/playwright.yaml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
-    - uses: oven-sh/setup-bun@v1
+    - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
     - name: Install Dependencies
       run: bun install --frozen-lockfile
     - uses: actions/setup-node@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f159cf65..8d284012 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 'latest'
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile