diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index ae28e27..2b1f2e2 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/short-tagging.yml b/.github/workflows/short-tagging.yml
index 28e2e4c..392b4af 100644
--- a/.github/workflows/short-tagging.yml
+++ b/.github/workflows/short-tagging.yml
@@ -8,6 +8,6 @@ jobs:
   actions-tagger:
     runs-on: ubuntu-latest
     steps:
-      - uses: Actions-R-Us/actions-tagger@latest
+      - uses: Actions-R-Us/actions-tagger@330ddfac760021349fef7ff62b372f2f691c20fb # latest
         with:
           publish_latest_tag: true
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 9ec8ec2..d943598 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout ${{ matrix.package.name }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Generate validation report for ${{ matrix.package.name }}
         id: validation
@@ -40,7 +40,7 @@ jobs:
           report_template_path: ${{ matrix.package.report_template_path }}
 
       - name: Upload ${{ matrix.package.name }} validation report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: success()
         with:
           name: ${{ matrix.package.name }} validation report
diff --git a/.github/workflows/test_no_cache.yaml b/.github/workflows/test_no_cache.yaml
index 54a1498..396e49f 100644
--- a/.github/workflows/test_no_cache.yaml
+++ b/.github/workflows/test_no_cache.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout ${{ matrix.package.name }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Generate validation report for ${{ matrix.package.name }}
         uses: ./
@@ -37,7 +37,7 @@ jobs:
           no_cache: true
 
       - name: Upload ${{ matrix.package.name }} validation report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: success()
         with:
           name: ${{ matrix.package.name }} validation report
diff --git a/action.yml b/action.yml
index 3003368..80d8ca0 100644
--- a/action.yml
+++ b/action.yml
@@ -49,7 +49,7 @@ runs:
 
     - name: Cache R packages
       if: "contains(inputs.no_cache, 'false')"
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
       with:
         path: /home/runner/work/_temp/Library
         key: ${{ inputs.cache_version }}-${{ runner.os }}-${{ steps.r_version.outputs.R_VERSION }}-${{ hashFiles('DESCRIPTION') }}