diff --git a/.github/workflows/compress.yml b/.github/workflows/compress.yml
index 4c23af1d..369fdad4 100644
--- a/.github/workflows/compress.yml
+++ b/.github/workflows/compress.yml
@@ -15,7 +15,7 @@ jobs:
 
       - name: Compress Images
         id: calibre
-        uses: calibreapp/image-actions@main
+        uses: calibreapp/image-actions@03c976c29803442fc4040a9de5509669e7759b81 # main
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}
           compressOnly: true
@@ -31,6 +31,6 @@ jobs:
       - name: Push Changes
         if: |
           steps.calibre.outputs.markdown != ''
-        uses: ad-m/github-push-action@master
+        uses: ad-m/github-push-action@4cc74773234f74829a8c21bc4d69dd4be9cfa599 # master
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index b8f51195..2f59c56e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -14,7 +14,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/starcharts.yml b/.github/workflows/starcharts.yml
index 83d69772..71d96b8a 100644
--- a/.github/workflows/starcharts.yml
+++ b/.github/workflows/starcharts.yml
@@ -10,7 +10,7 @@ jobs:
     name: Generate starcharts
     runs-on: ubuntu-latest
     steps:
-      - uses: MaoLongLong/actions-starcharts@main
+      - uses: MaoLongLong/actions-starcharts@8a02621f35e876183d7101b583133403e0c11c02 # main
         with:
           github_token: ${{ secrets.ACTION_TOKEN }}
           svg_path: images/starcharts.svg