diff --git a/.github/workflows/ai-code-scanner.yml b/.github/workflows/ai-code-scanner.yml
index d56af76e7..9323f9bc7 100644
--- a/.github/workflows/ai-code-scanner.yml
+++ b/.github/workflows/ai-code-scanner.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
     - name: AI Code Review
       uses: cds-snc/cds-ai-codereviewer@main
diff --git a/.github/workflows/clear-notify-cache.yaml b/.github/workflows/clear-notify-cache.yaml
index 47276762e..3d93ccb24 100644
--- a/.github/workflows/clear-notify-cache.yaml
+++ b/.github/workflows/clear-notify-cache.yaml
@@ -19,10 +19,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
 
       - name: Set up Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version: "14"