diff --git a/.github/actions/setup-python/action.yml b/.github/actions/setup-python/action.yml
index f451497..4fc1de6 100644
--- a/.github/actions/setup-python/action.yml
+++ b/.github/actions/setup-python/action.yml
@@ -4,7 +4,7 @@ runs:
     using: "composite"
     steps:
         - name: Set up Python
-          uses: actions/setup-python@v6
+          uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
           with:
               python-version-file: "pyproject.toml"
         - name: Install uv
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index e52f25a..bfe1128 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,7 +6,7 @@ jobs:
     lint:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
             - uses: ./.github/actions/setup-python
             - run: |
                   uv run ruff check --fix
@@ -15,13 +15,13 @@ jobs:
     typecheck:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
             - uses: ./.github/actions/setup-python
             - run: uv run ty check
 
     vulture:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
             - uses: ./.github/actions/setup-python
             - run: uv run vulture --min-confidence 100 --exclude ".venv" .
diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index efb0f1e..9371907 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -10,7 +10,7 @@ jobs:
     pytest:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v6
+            - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
             - uses: ./.github/actions/setup-python
             - run: |
                   uv run pytest