diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ed1cfa6..58e53d7 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -10,7 +10,7 @@ jobs:
     env:
       BUILD_NUMBER: ${{ github.run_number }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         with:
           fetch-depth: 0
 
@@ -32,7 +32,7 @@ jobs:
           increment: "auto"
       - run: "echo \"No feature or fix commits. Skipping build...\""
         if: "${{ steps.version-check.outputs.version == env.OLD_VERSION }}"
-      - uses: andymckay/cancel-action@0.3
+      - uses: andymckay/cancel-action@b9280e3f8986d7a8e91c7462efc0fa318010c8b1 # 0.3
         if: "${{ steps.version-check.outputs.version == env.OLD_VERSION }}"
       - name: "Wait for cancel to stick"
         run: "sleep 99999"
@@ -42,7 +42,7 @@ jobs:
       - run: "echo \"# Release version ${{ env.VERSION }}\" > $GITHUB_STEP_SUMMARY"
 
       # Build preparations
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
         with:
           java-version: '21'
           distribution: temurin
@@ -83,7 +83,7 @@ jobs:
       - name: 'Push tag'
         run: 'git push origin ${{ env.VERSION }}'
       - name: Create a Release
-        uses: ncipollo/release-action@v1
+        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.github/workflows/verifyPr.yml b/.github/workflows/verifyPr.yml
index 7019a62..ac8cdd4 100644
--- a/.github/workflows/verifyPr.yml
+++ b/.github/workflows/verifyPr.yml
@@ -12,12 +12,12 @@ jobs:
       group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
       cancel-in-progress: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         with:
           fetch-depth: 0
 
       # Build preparations
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
         with:
           java-version: '21'
           distribution: temurin