diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 189fecdae..3c4e3693f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -97,13 +97,13 @@ jobs:
         if: github.ref_type == 'tag'
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
         with:
            platforms: arm64
         if: github.ref_type == 'tag'
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
         with:
           #version: v0.12.1
           #version: https://github.com/docker/buildx.git#master
@@ -120,7 +120,7 @@ jobs:
         if: github.ref_type == 'tag'
 
       - name: Login to NGINX Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           registry: docker-mgmt-test.nginx.com
           username: ${{ steps.idtoken1.outputs.id_token }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 852918e08..af453eabe 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -99,13 +99,13 @@ jobs:
         if: github.ref_type == 'tag'
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
         with:
            platforms: arm64
         if: github.ref_type == 'tag'
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
         with:
           #version: v0.12.1
           #version: https://github.com/docker/buildx.git#master
@@ -122,7 +122,7 @@ jobs:
         if: github.ref_type == 'tag'
 
       - name: Login to NGINX Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           registry: docker-mgmt-test.nginx.com
           username: ${{ steps.idtoken1.outputs.id_token }}