diff --git a/action.yml b/action.yml
index 377a129..1ce6a0f 100644
--- a/action.yml
+++ b/action.yml
@@ -35,7 +35,7 @@ runs:
   using: "composite"
   steps:
     - name: Set up Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6
       with:
         python-version: "3.11"
 
@@ -54,7 +54,7 @@ runs:
 
     - name: Upload SARIF to Code Scanning
       if: ${{ always() && inputs.upload-sarif == 'true' }}
-      uses: github/codeql-action/upload-sarif@v4
+      uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9  # v4
       with:
         sarif_file: ${{ inputs.out }}/latest/results.sarif
         category: websec-validator