diff --git a/.github/workflows/release_ruby.yml b/.github/workflows/release_ruby.yml
index b768ff75436c..50b319b3164d 100644
--- a/.github/workflows/release_ruby.yml
+++ b/.github/workflows/release_ruby.yml
@@ -194,7 +194,7 @@ jobs:
           ls -lh pkg/*.gem
 
       - name: Release opendal gem
-        uses: rubygems/release-gem@f0d7faff26625599a847d40d9fa28ace24c2aacc # v1.2.0
+        uses: rubygems/release-gem@052cc82692552de3ef2b81fd670e41d13cba8092 # v1.2.0
         with:
           working-directory: bindings/ruby
 
diff --git a/.github/workflows/release_rust.yml b/.github/workflows/release_rust.yml
index e50d74f08bd7..dedc5cc6d75e 100644
--- a/.github/workflows/release_rust.yml
+++ b/.github/workflows/release_rust.yml
@@ -68,7 +68,7 @@ jobs:
         with:
           need-rocksdb: true
           need-protoc: true
-      - uses: rust-lang/crates-io-auth-action@bbd81622f20ce9e2dd9622e3218b975523e45bbe
+      - uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18
         id: auth
       - name: Publish Rust crates
         env: