diff --git a/.github/workflows/cocoapods-deploy.yml b/.github/workflows/cocoapods-deploy.yml
index b98e82d..1633e18 100644
--- a/.github/workflows/cocoapods-deploy.yml
+++ b/.github/workflows/cocoapods-deploy.yml
@@ -5,6 +5,9 @@ on:
     tags-ignore:
       - 'android-*'
 
+permissions:
+  contents: read
+
 jobs:
   Deploy:
     name: Publish
@@ -12,7 +15,7 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v6
-      - uses: maxim-lobanov/setup-xcode@v1
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
         with:
           xcode-version: latest-stable
       - name: Update Specs Repo
diff --git a/.github/workflows/ios.yml b/.github/workflows/ios.yml
index 62e8b6d..2952a74 100644
--- a/.github/workflows/ios.yml
+++ b/.github/workflows/ios.yml
@@ -7,6 +7,9 @@ on:
       - '.github/**'
       - '**/*.podspec'
 
+permissions:
+  contents: read
+
 jobs:
   Pod-Lint:
     name: Cocoapods Lint
@@ -14,7 +17,7 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v6
-      - uses: maxim-lobanov/setup-xcode@v1
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
         with:
           xcode-version: latest-stable
       - name: Update Specs Repo
@@ -26,7 +29,7 @@ jobs:
     name: Build Device
     runs-on: macos-15
     steps:
-      - uses: maxim-lobanov/setup-xcode@v1
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
         with:
           xcode-version: latest-stable
       - name: Checkout
@@ -35,7 +38,7 @@ jobs:
         working-directory: ios/Demo/Demo
         run: |
           echo "$IOS_TEST_ENTITLEMENTS_CONTENTS" > DemoDebug.entitlements
-      - uses: maxim-lobanov/setup-xcode@v1
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
         with:
           xcode-version: latest-stable
       - name: Build
@@ -55,7 +58,7 @@ jobs:
     env:
       DEVICE_NAME: "iPhone 16"
     steps:
-      - uses: maxim-lobanov/setup-xcode@v1
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
         with:
           xcode-version: latest-stable
       - name: Checkout
@@ -77,7 +80,7 @@ jobs:
     env:
       DEVICE_NAME: "iPhone 16"
     steps:
-      - uses: maxim-lobanov/setup-xcode@v1
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
         with:
           xcode-version: latest-stable
       - name: Checkout
@@ -86,7 +89,7 @@ jobs:
         working-directory: ios/Demo/Demo
         run: |
           echo "$IOS_TEST_ENTITLEMENTS_CONTENTS" > DemoDebug.entitlements
-      - uses: maxim-lobanov/setup-xcode@v1
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
         with:
           xcode-version: latest-stable
       - name: Boot simulator