diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f94d4ee..324a3ae 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
     - name: Run Format
       run: |
@@ -29,7 +29,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
     - name: Run Analyze
       run: |
@@ -42,7 +42,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
     - name: Run Refactor
       run: |
@@ -55,7 +55,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
     - name: Run Unit Tests
       run: |
@@ -76,7 +76,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
     - name: Build Docker image
       run: docker compose build
@@ -85,7 +85,7 @@ jobs:
       run: docker save -o executor-image.tar executor-openruntimes-executor
 
     - name: Upload Docker image artifact
-      uses: actions/upload-artifact@v6
+      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
       with:
         name: executor-image
         path: executor-image.tar
@@ -98,10 +98,10 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
     - name: Download Docker image artifact
-      uses: actions/download-artifact@v7
+      uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
       with:
         name: executor-image
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3e84bb7..18956a2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,23 +15,23 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ env.USERNAME }}
           password: ${{ env.PASSWORD }}
 
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@0a97817b6ade9f46837855d676c4cca3a2471fc9 # v4
         with:
           build-args: |
             OPR_EXECUTOR_VERSION=${{ env.TAG }}