diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index ccc384f9d..e68756c3d 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -13,7 +13,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/stale@v7
+    - uses: actions/stale@6f05e4244c9a0b2ed3401882b05d701dd0a7289b # v7.0.0
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         stale-issue-message: 'This issue is stale because it has been open many days with no activity. It will be closed soon unless the stale label is removed or a comment is made.'
diff --git a/.github/workflows/update-core-index.yml b/.github/workflows/update-core-index.yml
index 888cdda75..76b0cceb4 100644
--- a/.github/workflows/update-core-index.yml
+++ b/.github/workflows/update-core-index.yml
@@ -13,9 +13,9 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
 
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
         node-version: 18
 
@@ -28,7 +28,7 @@ jobs:
         npm run create-core-index
 
     - name: commit and push updated results
-      uses: github-actions-x/commit@v2.9
+      uses: github-actions-x/commit@722d56b8968bf00ced78407bbe2ead81062d8baa # v2.9
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
         push-branch: 'main'
diff --git a/.github/workflows/update-npm-index.yml b/.github/workflows/update-npm-index.yml
index b37a6ec1c..0c9936495 100644
--- a/.github/workflows/update-npm-index.yml
+++ b/.github/workflows/update-npm-index.yml
@@ -13,9 +13,9 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
 
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 
       with:
         node-version: 18
 
@@ -28,7 +28,7 @@ jobs:
         npm run create-npm-index
 
     - name: commit and push updated results
-      uses: github-actions-x/commit@v2.9
+      uses: github-actions-x/commit@722d56b8968bf00ced78407bbe2ead81062d8baa # v2.9
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
         push-branch: 'main'
diff --git a/.github/workflows/validate-vulnerability.yml b/.github/workflows/validate-vulnerability.yml
index 4c92c93a5..9c72a9781 100644
--- a/.github/workflows/validate-vulnerability.yml
+++ b/.github/workflows/validate-vulnerability.yml
@@ -12,10 +12,10 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
 
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
         with:
           node-version: 18