diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml
index 9789ff244..e5e1d4a56 100644
--- a/.github/workflows/commitlint.yaml
+++ b/.github/workflows/commitlint.yaml
@@ -16,6 +16,6 @@ jobs:
       - name: Remove tsconfig
         run: rm tsconfig.json
 
-      - uses: wagoid/commitlint-github-action@v6.0.1
+      - uses: wagoid/commitlint-github-action@baa1b236f990293a1b2d94c19e41c2313a85e749 # v6.0.2
         with:
           configFile: commitlint.config.ts
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 8a7bd2da2..ed81dc2ed 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -26,7 +26,7 @@ jobs:
           token: ${{ secrets.KONGPONENTS_BOT_PAT }}
 
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version-file: '.nvmrc'
 
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index fac7bf4ff..46b1430f2 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -46,7 +46,7 @@ jobs:
          fetch-depth: 0
 
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version-file: '.nvmrc'
 
@@ -130,7 +130,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.KONGPONENTS_BOT_PAT }}
 
       - name: Run Cypress component tests
-        uses: cypress-io/github-action@v6
+        uses: cypress-io/github-action@fa88e4afe551e64c8827a4b9e379afc63d8f691a # v6.0.1
         with:
           install: false
           command: yarn test