diff --git a/.github/workflows/docker-backend.yml b/.github/workflows/docker-backend.yml
index 1b87332..509c303 100644
--- a/.github/workflows/docker-backend.yml
+++ b/.github/workflows/docker-backend.yml
@@ -112,7 +112,7 @@ jobs:
           done
 
       - name: Log into registry ${{ env.OCI_REGISTRY }}
-        uses: famedly/login-action@v2
+        uses: docker/login-action@2ff7bc63ffa51414f77e9cbeea0d3297c1672d2e
         if: env.OCI_REGISTRY != null
         with:
           registry: ${{ env.OCI_REGISTRY }}
diff --git a/.github/workflows/rust-workflow.yml b/.github/workflows/rust-workflow.yml
index a4ed63d..af15c11 100644
--- a/.github/workflows/rust-workflow.yml
+++ b/.github/workflows/rust-workflow.yml
@@ -52,7 +52,7 @@ jobs:
     container: ghcr.io/famedly/rust-container:nightly
     steps:
     - name: Checkout workflow dependencies
-      uses: actions/checkout@v4
+      uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
       with:
         repository: famedly/backend-build-workflows
         ref: ${{ inputs.ref }}
@@ -62,10 +62,10 @@ jobs:
         crate_registry_ssh_privkey: ${{ secrets.CRATE_REGISTRY_SSH_PRIVKEY}}
 
     - name: Checkout the repository to test
-      uses: actions/checkout@v4
+      uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
     - name: Caching
-      uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0
+      uses: Swatinem/rust-cache@65012b490220f477f20ab979e35ae732e6de4e68
 
     - name: Rustfmt
       shell: bash
@@ -88,7 +88,7 @@ jobs:
     container: registry.famedly.net/docker-oss/rust-container:nightly
     steps:
     - name: Checkout workflow dependencies
-      uses: actions/checkout@v4
+      uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
       with:
         repository: famedly/backend-build-workflows
         ref: ${{ inputs.ref }}
@@ -98,10 +98,10 @@ jobs:
         crate_registry_ssh_privkey: ${{ secrets.CRATE_REGISTRY_SSH_PRIVKEY}}
 
     - name: Checkout the repository to test
-      uses: actions/checkout@v4
+      uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
     - name: Caching
-      uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0
+      uses: Swatinem/rust-cache@65012b490220f477f20ab979e35ae732e6de4e68
 
     - name: Test
       shell: bash
@@ -113,12 +113,12 @@ jobs:
       run: cargo +${NIGHTLY_VERSION} test --doc --workspace --verbose ${{inputs.test_args}}
 
     - name: Codecov - Upload coverage
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@ca0a928a4cb3911011e868128a5cd90437c12db1
       with:
         token: ${{secrets.CODECOV_TOKEN}}
         files: "lcov.info"
 
     - name: Codecov - Upload test results
-      uses: codecov/test-results-action@v1
+      uses: codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
       with:
         token: ${{secrets.CODECOV_TOKEN}}
diff --git a/.github/workflows/~local-checks.yml b/.github/workflows/~local-checks.yml
index 3a59cdc..0bfbb3b 100644
--- a/.github/workflows/~local-checks.yml
+++ b/.github/workflows/~local-checks.yml
@@ -20,7 +20,7 @@ jobs:
         run: sudo apt-get install -y shellcheck
 
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
       - name: Run shellcheck on all shell files
         run: find . \( -name '*.sh' -or -name '*.bash' \) -exec shellcheck --color=always {} +