diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c16d7e2..056ed4a 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,10 +6,10 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 1024
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: '3.8'
       - name: pre-commit
diff --git a/.github/workflows/ut.yml b/.github/workflows/ut.yml
index 81138a3..a37a2f2 100644
--- a/.github/workflows/ut.yml
+++ b/.github/workflows/ut.yml
@@ -7,8 +7,8 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: '3.8'
       - name: Install dependencies
@@ -19,7 +19,7 @@ jobs:
         run: |
           PYTHONPATH=src pytest --log-level=debug --junitxml=junit_report.xml .
       - name: Publish Unit Test Results
-        uses: EnricoMi/publish-unit-test-result-action/composite@v1
+        uses: EnricoMi/publish-unit-test-result-action/composite@b9f6c61d965bcaa18acc02d6daf706373a448f02 # v1
         if: always()
         with:
           files: junit_report.xml