diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index 683b3f3f70..668d69bb0b 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -17,7 +17,7 @@ jobs:
     name: "Check PR Dependencies"
     steps:
       - name: PR Dependency Check
-        uses: gregsdennis/dependencies-action@v1.4.1
+        uses: gregsdennis/dependencies-action@ae6e0529ef70f1366a21972f40b1ad0e1b5e3218 # v1.4.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   semantic-title:
@@ -25,6 +25,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Check Semantic Pull Request"
-        uses: amannn/action-semantic-pull-request@v6.1.1
+        uses: amannn/action-semantic-pull-request@fdd4d3ddf614fbcd8c29e4b106d3bbe0cb2c605d # v6.1.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/todo-checks.yml b/.github/workflows/todo-checks.yml
index dbba5f59cb..e8b1e7b5cf 100644
--- a/.github/workflows/todo-checks.yml
+++ b/.github/workflows/todo-checks.yml
@@ -23,7 +23,7 @@ jobs:
       - name: "Checkout Repository"
         uses: actions/checkout@v5
       - name: "Track TODO Action"
-        uses: ribtoks/tdg-github-action@v0.4.15-beta
+        uses: ribtoks/tdg-github-action@bb998752af7ac294aa9350895908ae7eac3f1c1d # v0.4.15-beta
         with:
           TOKEN: ${{ secrets.GITHUB_TOKEN }}
           REPO: ${{ github.repository }}