diff --git a/.github/workflows/deploy_nextjs.yaml b/.github/workflows/deploy_nextjs.yaml
index 4bb20957..642a771b 100644
--- a/.github/workflows/deploy_nextjs.yaml
+++ b/.github/workflows/deploy_nextjs.yaml
@@ -88,7 +88,7 @@ jobs:
        
       - name: Update Image in task definition
         id: task-def
-        uses: aws-actions/amazon-ecs-render-task-definition@v1
+        uses: aws-actions/amazon-ecs-render-task-definition@cbed19f1b86bbb18f59cfffde7107b93cc9b75da # v1
         with:
            task-definition: apps/nextjs-website/task-definition.json
            container-name: nextjs-docker
diff --git a/.github/workflows/deploy_website_prod.yaml b/.github/workflows/deploy_website_prod.yaml
index f1f49737..fc51eef4 100644
--- a/.github/workflows/deploy_website_prod.yaml
+++ b/.github/workflows/deploy_website_prod.yaml
@@ -67,7 +67,7 @@ jobs:
 
       - name: Purge Azure CDN endpoint (appio only)
         if: ${{ inputs.environment == 'appio' }}
-        uses: azure/cli@v1
+        uses: azure/cli@4db43908b9df2e7ac93c8275a8f9a448c59338dd # v1
         with:
           azcliversion: 2.30.0
           inlineScript: |