diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 7f46c52ab5..32c961b32b 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -62,7 +62,7 @@ jobs:
           path: gh-pages
 
       - name: Build test report
-        uses: simple-elf/allure-report-action@v1.9
+        uses: simple-elf/allure-report-action@58e6590adf6d8f196a0d771bf8a00e6921086a62 # v1.9
         with:
           gh_pages: gh-pages
           allure_history: allure-history
@@ -71,6 +71,6 @@ jobs:
           report_url: https://${{ github.repository_owner }}.github.io/hale-core/pr-preview/pr-${{ github.event.pull_request.number }}
 
       - name: Deploy preview
-        uses: rossjrw/pr-preview-action@v1
+        uses: rossjrw/pr-preview-action@f31d5aa7b364955ea86228b9dcd346dc3f29c408 # v1
         with:
           source-dir: ./allure-history/
diff --git a/.github/workflows/delete-preview.yml b/.github/workflows/delete-preview.yml
index d258c8e75f..60de4d22be 100644
--- a/.github/workflows/delete-preview.yml
+++ b/.github/workflows/delete-preview.yml
@@ -19,6 +19,6 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Deploy preview
-        uses: rossjrw/pr-preview-action@v1
+        uses: rossjrw/pr-preview-action@f31d5aa7b364955ea86228b9dcd346dc3f29c408 # v1
         with:
           action: remove
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a5c6464df0..2264318ba8 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -54,14 +54,14 @@ jobs:
           path: gh-pages
 
       - name: Build test report
-        uses: simple-elf/allure-report-action@v1.9
+        uses: simple-elf/allure-report-action@58e6590adf6d8f196a0d771bf8a00e6921086a62 # v1.9
         with:
           gh_pages: gh-pages
           allure_history: allure-history
           allure_results: allure-results
 
       - name: Publish test report
-        uses: JamesIves/github-pages-deploy-action@v4
+        uses: JamesIves/github-pages-deploy-action@94f3c658273cf92fb48ef99e5fbc02bd2dc642b2 # v4
         with:
           branch: gh-pages
           folder: allure-history