diff --git a/.github/workflows/cleanup.yaml b/.github/workflows/cleanup.yaml
index e1d60d1c..f296cec9 100644
--- a/.github/workflows/cleanup.yaml
+++ b/.github/workflows/cleanup.yaml
@@ -11,15 +11,15 @@ jobs:
       matrix:
         scenario: [ 'success', 'failure' ]
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-node@v3
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
       with:
         node-version: '18'
-      
+
     # Dependencies
     # https://docs.github.com/en/actions/guides/caching-dependencies-to-speed-up-workflows#example-using-the-cache-action
     - name: Cache node modules
-      uses: actions/cache@v2
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
       env:
         cache-name: cache-node-modules
       with:
diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml
index 7041cae2..0aa2ceb9 100644
--- a/.github/workflows/pipeline.yaml
+++ b/.github/workflows/pipeline.yaml
@@ -11,15 +11,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Environment
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: '18'
 
       # Dependencies
       # https://docs.github.com/en/actions/guides/caching-dependencies-to-speed-up-workflows#example-using-the-cache-action
       - name: Cache node modules
-        uses: actions/cache@v2
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         env:
           cache-name: cache-node-modules
         with:
@@ -48,15 +48,15 @@ jobs:
           exit_code: 1
       fail-fast: false
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-node@v3
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
       with:
         node-version: '18'
 
     # Dependencies
     # https://docs.github.com/en/actions/guides/caching-dependencies-to-speed-up-workflows#example-using-the-cache-action
     - name: Cache node modules
-      uses: actions/cache@v2
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
       env:
         cache-name: cache-node-modules
       with:
@@ -94,7 +94,7 @@ jobs:
 
 
     - name: assert deployment in progress
-      uses: actions/github-script@v6
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
       env:
         deployment_id: ${{ steps.deployment.outputs.deployment_id }}
         status_id: ${{ steps.deployment.outputs.status_id }}
@@ -131,7 +131,7 @@ jobs:
         debug: true
 
     - name: assert deployment complete
-      uses: actions/github-script@v6
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
       env:
         deployment_id: ${{ steps.deployment.outputs.deployment_id }}
         status_id: ${{ steps.finish.outputs.status_id }}
diff --git a/.github/workflows/publish_v1.yaml b/.github/workflows/publish_v1.yaml
index 06988f45..a45ce63d 100644
--- a/.github/workflows/publish_v1.yaml
+++ b/.github/workflows/publish_v1.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - name: update tag
       run: |
         git config --global user.email "${GITHUB_ACTOR}@users.noreply.github.com"