diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index 9a96987..dc58293 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -14,6 +14,6 @@ jobs:
       pull-requests: write   # needed to open the PR
     steps:
       - name: Backport
-        uses: m-kuhn/backport@v1.2.6
+        uses: m-kuhn/backport@30b6e83906cc97bad3a02867181d6236becf68f9
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/test-documentation.yml b/.github/workflows/test-documentation.yml
index 24d2972..e54ed1c 100644
--- a/.github/workflows/test-documentation.yml
+++ b/.github/workflows/test-documentation.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Test if the documentation will render without warnings
         run: |
           mkdir -p Documentation-GENERATED-temp \
           && docker run --rm --pull always -v $(pwd):/project \
-             ghcr.io/typo3-documentation/render-guides:latest --config=Documentation --no-progress --minimal-test
\ No newline at end of file
+             ghcr.io/typo3-documentation/render-guides:latest --config=Documentation --no-progress --minimal-test