diff --git a/.github/workflows/codeql_analysis.yml b/.github/workflows/codeql_analysis.yml
index 121bf15c8..25a9cc773 100644
--- a/.github/workflows/codeql_analysis.yml
+++ b/.github/workflows/codeql_analysis.yml
@@ -34,7 +34,7 @@ jobs:
       run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
     - name: Cache build-tools
-      uses: actions/cache@v3
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
       with:
         path: ${{ steps.build-tools-path.outputs.dir }}
         key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/deploy_github_releases.yml b/.github/workflows/deploy_github_releases.yml
index 136c00c57..bb164c2c8 100644
--- a/.github/workflows/deploy_github_releases.yml
+++ b/.github/workflows/deploy_github_releases.yml
@@ -22,7 +22,7 @@ jobs:
       run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
     - name: Cache build-tools
-      uses: actions/cache@v3
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
       with:
         path: ${{ steps.build-tools-path.outputs.dir }}
         key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/deploy_library_releases.yml b/.github/workflows/deploy_library_releases.yml
index 5afd731bd..9ac487072 100644
--- a/.github/workflows/deploy_library_releases.yml
+++ b/.github/workflows/deploy_library_releases.yml
@@ -21,7 +21,7 @@ jobs:
       run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
     - name: Cache build-tools
-      uses: actions/cache@v3
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
       with:
         path: ${{ steps.build-tools-path.outputs.dir }}
         key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/deploy_snapshot.yml b/.github/workflows/deploy_snapshot.yml
index 1de0e67e7..214758695 100644
--- a/.github/workflows/deploy_snapshot.yml
+++ b/.github/workflows/deploy_snapshot.yml
@@ -33,7 +33,7 @@ jobs:
       run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
     - name: Cache build-tools
-      uses: actions/cache@v3
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
       with:
         path: ${{ steps.build-tools-path.outputs.dir }}
         key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/draft_new_release.yml b/.github/workflows/draft_new_release.yml
index c068a1446..9dec71f51 100644
--- a/.github/workflows/draft_new_release.yml
+++ b/.github/workflows/draft_new_release.yml
@@ -46,7 +46,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index e8bcd7834..2a48fe803 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -51,7 +51,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
@@ -97,7 +97,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
@@ -150,7 +150,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
@@ -196,7 +196,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
@@ -242,7 +242,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
@@ -288,7 +288,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/shadow_job.yml b/.github/workflows/shadow_job.yml
index ab72f7d21..259516bb9 100644
--- a/.github/workflows/shadow_job.yml
+++ b/.github/workflows/shadow_job.yml
@@ -48,7 +48,7 @@ jobs:
       run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
     - name: Cache build-tools
-      uses: actions/cache@v3
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
       with:
         path: ${{ steps.build-tools-path.outputs.dir }}
         key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/sync_crowdin.yml b/.github/workflows/sync_crowdin.yml
index 24dcd76bc..36349bed3 100644
--- a/.github/workflows/sync_crowdin.yml
+++ b/.github/workflows/sync_crowdin.yml
@@ -21,7 +21,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3
diff --git a/.github/workflows/update_publicsuffix_data.yml b/.github/workflows/update_publicsuffix_data.yml
index 07393b4cf..8e481ab0d 100644
--- a/.github/workflows/update_publicsuffix_data.yml
+++ b/.github/workflows/update_publicsuffix_data.yml
@@ -21,7 +21,7 @@ jobs:
         run: echo "dir=${ANDROID_HOME}/build-tools/34.0.0-rc3" >> "${GITHUB_OUTPUT}"
 
       - name: Cache build-tools
-        uses: actions/cache@v3
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ${{ steps.build-tools-path.outputs.dir }}
           key: ${{ runner.os }}-34.0.0-rc3