diff --git a/.github/workflows/backend-motoko-format-check.yml b/.github/workflows/backend-motoko-format-check.yml
index 8a494cbe..51e31253 100644
--- a/.github/workflows/backend-motoko-format-check.yml
+++ b/.github/workflows/backend-motoko-format-check.yml
@@ -17,10 +17,10 @@ jobs:
   backend-motoko-format-check-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
-      - uses: ZenVoich/setup-mops@v1
+      - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 1
       - name: Provision Linux
diff --git a/.github/workflows/backend-motoko.yml b/.github/workflows/backend-motoko.yml
index 8853d2f9..8ba91d76 100644
--- a/.github/workflows/backend-motoko.yml
+++ b/.github/workflows/backend-motoko.yml
@@ -21,10 +21,10 @@ jobs:
   backend-motoko-tests-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
-      - uses: ZenVoich/setup-mops@v1
+      - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 1
       - name: Provision Linux
@@ -42,10 +42,10 @@ jobs:
   backend-motoko-tests-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
-      - uses: ZenVoich/setup-mops@v1
+      - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 1
       - name: Provision Darwin
diff --git a/.github/workflows/backend-rust-canbench.yml b/.github/workflows/backend-rust-canbench.yml
index 91c3bc6f..d52c8239 100644
--- a/.github/workflows/backend-rust-canbench.yml
+++ b/.github/workflows/backend-rust-canbench.yml
@@ -21,7 +21,7 @@ jobs:
   cargo-benchmark-backend-ibe-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/backend-rust.yml b/.github/workflows/backend-rust.yml
index 12171e5a..c8b6e85f 100644
--- a/.github/workflows/backend-rust.yml
+++ b/.github/workflows/backend-rust.yml
@@ -21,7 +21,7 @@ jobs:
   cargo-test-backend-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
@@ -36,7 +36,7 @@ jobs:
   cargo-test-backend-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
diff --git a/.github/workflows/clippy.yml b/.github/workflows/clippy.yml
index 23767f16..10c8e2c6 100644
--- a/.github/workflows/clippy.yml
+++ b/.github/workflows/clippy.yml
@@ -23,7 +23,7 @@ jobs:
   cargo-clippy-backend-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
index 6ac0fd19..1ed691a2 100644
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -12,7 +12,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: dfinity/conventional-pr-title-action@v4.0.0
+      - uses: dfinity/conventional-pr-title-action@41fbb167fd524835beda2b81882b7c75b1061dbc # v4.0.0
         with:
           success-state: Title follows the specification.
           failure-state: Title does not follow the specification.
diff --git a/.github/workflows/examples-basic-bls-signing.yml b/.github/workflows/examples-basic-bls-signing.yml
index 779c1312..50dcf7f2 100644
--- a/.github/workflows/examples-basic-bls-signing.yml
+++ b/.github/workflows/examples-basic-bls-signing.yml
@@ -21,7 +21,7 @@ jobs:
   examples-basic-bls-signing-rust-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -38,7 +38,7 @@ jobs:
   examples-basic-bls-signing-rust-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
@@ -54,7 +54,7 @@ jobs:
   examples-basic-bls-signing-motoko-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -71,7 +71,7 @@ jobs:
   examples-basic-bls-signing-motoko-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/examples-basic-ibe.yml b/.github/workflows/examples-basic-ibe.yml
index 9ef217cc..c153c61c 100644
--- a/.github/workflows/examples-basic-ibe.yml
+++ b/.github/workflows/examples-basic-ibe.yml
@@ -20,7 +20,7 @@ jobs:
   examples-basic-ibe-rust-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -37,7 +37,7 @@ jobs:
   examples-basic-ibe-rust-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
@@ -53,7 +53,7 @@ jobs:
   examples-basic-ibe-motoko-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -70,7 +70,7 @@ jobs:
   examples-basic-ibe-motoko-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/examples-basic-timelock-ibe.yml b/.github/workflows/examples-basic-timelock-ibe.yml
index 4a444b1a..15c26f28 100644
--- a/.github/workflows/examples-basic-timelock-ibe.yml
+++ b/.github/workflows/examples-basic-timelock-ibe.yml
@@ -19,7 +19,7 @@ jobs:
   examples-basic-timelock-ibe-rust-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -36,7 +36,7 @@ jobs:
   examples-basic-timelock-ibe-rust-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/examples-encrypted-chat.yml b/.github/workflows/examples-encrypted-chat.yml
index 35d902ff..206a93fc 100644
--- a/.github/workflows/examples-encrypted-chat.yml
+++ b/.github/workflows/examples-encrypted-chat.yml
@@ -19,7 +19,7 @@ jobs:
   examples-encrypted-chat-rust-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
@@ -31,7 +31,7 @@ jobs:
   examples-encrypted-chat-rust-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
       - name: Backend Tests Encrypted Chat Rust Linux
diff --git a/.github/workflows/examples-encrypted-notes-dapp.yml b/.github/workflows/examples-encrypted-notes-dapp.yml
index a7540cec..6310b026 100644
--- a/.github/workflows/examples-encrypted-notes-dapp.yml
+++ b/.github/workflows/examples-encrypted-notes-dapp.yml
@@ -20,7 +20,7 @@ jobs:
   examples-encrypted-notes-dapp-rust-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -34,7 +34,7 @@ jobs:
   examples-encrypted-notes-dapp-rust-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
@@ -47,7 +47,7 @@ jobs:
   examples-encrypted-notes-dapp-motoko-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -61,7 +61,7 @@ jobs:
   examples-encrypted-notes-dapp-motoko-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/examples-password-manager-with-metadata.yml b/.github/workflows/examples-password-manager-with-metadata.yml
index feb79ac7..e85003ee 100644
--- a/.github/workflows/examples-password-manager-with-metadata.yml
+++ b/.github/workflows/examples-password-manager-with-metadata.yml
@@ -22,7 +22,7 @@ jobs:
   examples-password-manager-with-metadata-rust-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -39,7 +39,7 @@ jobs:
   examples-password-manager-with-metadata-rust-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
@@ -55,7 +55,7 @@ jobs:
   examples-password-manager-with-metadata-motoko-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -72,7 +72,7 @@ jobs:
   examples-password-manager-with-metadata-motoko-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/examples-password-manager.yml b/.github/workflows/examples-password-manager.yml
index 4532f1e0..a61fdad9 100644
--- a/.github/workflows/examples-password-manager.yml
+++ b/.github/workflows/examples-password-manager.yml
@@ -22,7 +22,7 @@ jobs:
   examples-password-manager-rust-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -38,7 +38,7 @@ jobs:
   examples-password-manager-rust-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
@@ -53,7 +53,7 @@ jobs:
   examples-password-manager-motoko-darwin:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
@@ -69,7 +69,7 @@ jobs:
   examples-password-manager-motoko-linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index b17624e4..52e0224d 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -21,7 +21,7 @@ jobs:
   frontend_ic_vetkeys_linux:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Linux
@@ -37,7 +37,7 @@ jobs:
   frontend_ic_vetkeys_mac:
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Provision Darwin
diff --git a/.github/workflows/publish-frontend-docs.yml b/.github/workflows/publish-frontend-docs.yml
index c7040d66..2028423d 100644
--- a/.github/workflows/publish-frontend-docs.yml
+++ b/.github/workflows/publish-frontend-docs.yml
@@ -18,14 +18,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout ${{ github.event.inputs.tag }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
           ref: ${{ github.event.inputs.tag }}
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '20'
           cache: 'npm'
@@ -35,9 +35,9 @@ jobs:
           bash ./scripts/gen_frontend_docs.sh
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
         with:
           path: docs
 
       - name: Deploy to GitHub Pages
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
diff --git a/.github/workflows/publish-frontend.yml b/.github/workflows/publish-frontend.yml
index cc6b0aa6..52c22eb1 100644
--- a/.github/workflows/publish-frontend.yml
+++ b/.github/workflows/publish-frontend.yml
@@ -15,11 +15,11 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'