diff --git a/.github/workflows/docs-redirects.yml b/.github/workflows/docs-redirects.yml
index 7b7ae48d..336a1636 100644
--- a/.github/workflows/docs-redirects.yml
+++ b/.github/workflows/docs-redirects.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Download Hurl ${{ env.HURL_VERSION }}
       run: > 
         curl --no-progress-meter --location --fail
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0b1fbbc2..f8246609 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -15,10 +15,10 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v7
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Setup Python
-      uses: actions/setup-python@v7
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3"
 
diff --git a/.github/workflows/server-list.yml b/.github/workflows/server-list.yml
index 9ce04c5c..c0fcdbc5 100644
--- a/.github/workflows/server-list.yml
+++ b/.github/workflows/server-list.yml
@@ -14,14 +14,14 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v7
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Update salt-server-list.rst
       run: |
         wget --quiet -O docs/salt-server-list.rst https://salt-public.psf.io/salt-server-list.rst
 
     - name: Create Pull Request
-      uses: peter-evans/create-pull-request@v8
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
       with:
         commit-message: Update docs/salt-server-list.rst
         branch: salt-server-list