diff --git a/.github/workflows/prvalidation.yaml b/.github/workflows/prvalidation.yaml
index a56334e..1870581 100644
--- a/.github/workflows/prvalidation.yaml
+++ b/.github/workflows/prvalidation.yaml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-    - uses: docker/build-push-action@v6
+    - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
       with:
         file: Dockerfile
         context: .
diff --git a/.github/workflows/releaseflow.yaml b/.github/workflows/releaseflow.yaml
index 4316675..6f5ae02 100644
--- a/.github/workflows/releaseflow.yaml
+++ b/.github/workflows/releaseflow.yaml
@@ -11,19 +11,19 @@ jobs:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
     - name: Docker Login
-      uses: docker/login-action@v3.5.0
+      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
       with:
         # Username used to log against the Docker registry
         username: ${{ secrets.DOCKERHUB_USERNAME }}
         # Password or personal access token used to log against the Docker registry
         password: ${{ secrets.DOCKERHUB_PASSWORD }}
 
-    - uses: docker/build-push-action@v6
+    - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
       with:
         file: Dockerfile
         context: .