diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 8f5df9b..f451f5e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -11,8 +11,8 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@v6.0.2
+      - uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version: latest
       - run: make deps
diff --git a/.github/workflows/git-issue-release.yaml b/.github/workflows/git-issue-release.yaml
index f14ec42..8ab8214 100644
--- a/.github/workflows/git-issue-release.yaml
+++ b/.github/workflows/git-issue-release.yaml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: read
     steps:
       - name: git-issue-release
-        uses: kouki-dan/git-issue-release@v1
+        uses: kouki-dan/git-issue-release@v1.3.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index ec9d155..6cc969a 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -14,12 +14,12 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-node@v6
         with:
           node-version: "lts/*"
           registry-url: "https://registry.npmjs.org"
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version: latest
       - run: make deps