diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 139ec64..0fac00e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -95,7 +95,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Configure Git Credentials
         run: |
           git config user.name version-cli[bot]
@@ -103,12 +103,12 @@ jobs:
       - name: Install Poetry
         # renovate: datasource=github-tags depName=poetry packageName=python-poetry/poetry
         run: pipx install poetry==1.8.2
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5
         with:
           python-version-file: pyproject.toml
           cache: "poetry"
       - run: echo "cache_id=$(date --utc '+%V')" >> $GITHUB_ENV
-      - uses: actions/cache@v4
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
         with:
           key: mkdocs-material-${{ env.cache_id }}
           path: .cache