diff --git a/.github/workflows/ansible-galaxy-workflow.yaml b/.github/workflows/ansible-galaxy-workflow.yaml
index 90dc54a..c608e45 100644
--- a/.github/workflows/ansible-galaxy-workflow.yaml
+++ b/.github/workflows/ansible-galaxy-workflow.yaml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: 'Checkout git repo'
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: 'Release on galaxy'
         run: >-
diff --git a/.github/workflows/ansible-integration-workflow.yaml b/.github/workflows/ansible-integration-workflow.yaml
index 65505b6..3126b67 100644
--- a/.github/workflows/ansible-integration-workflow.yaml
+++ b/.github/workflows/ansible-integration-workflow.yaml
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install (testing) requirements
         run: |
@@ -79,7 +79,7 @@ jobs:
       fail-fast: false
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Prepare Molecule Tests
         run: |
@@ -101,7 +101,7 @@ jobs:
           fi
 
       - name: Setup Python
-        uses: actions/setup-python@v7
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.13"
           cache: "pip"
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 2a0dde5..9988346 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -20,6 +20,6 @@ jobs:
           echo "token=$TOKEN" >> $GITHUB_OUTPUT
 
       - name: Merge
-        uses: fastify/github-action-merge-dependabot@v3
+        uses: fastify/github-action-merge-dependabot@73ec4cbb5e56df5591eae286972d5b2201ffe90f # v3.15.0
         with:
           github-token: ${{ steps.acces_token.outputs.token }}
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 331b1b9..7c52320 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Publish Release
-        uses: release-drafter/release-drafter@v7
+        uses: release-drafter/release-drafter@eada3c96a64734dd381cfbda23511034e328ddb0 # v7.6.0
         with:
           publish: false
         env: