diff --git a/.github/actions.lock.yaml b/.github/actions.lock.yaml
new file mode 100644
index 000000000..587b79f23
--- /dev/null
+++ b/.github/actions.lock.yaml
@@ -0,0 +1,31 @@
+version: 1
+generated_at: 2026-05-25T13:05:12Z
+internal: []
+trusted:
+  - action: actions/checkout
+    refs:
+      - v2
+    occurrences:
+      v2:
+        .github/workflows/docker-build.yml:
+          - jobs.build.steps.[0].uses
+        .github/workflows/python-package.yml:
+          - jobs.build.steps.[0].uses
+  - action: actions/setup-python
+    refs:
+      - v4.0.0
+    occurrences:
+      v4.0.0:
+        .github/workflows/python-package.yml:
+          - jobs.build.steps.[1].uses
+external:
+  - action: mr-smithers-excellent/docker-build-push
+    refs:
+      - v5
+    occurrences:
+      v5:
+        .github/workflows/docker-build.yml:
+          - jobs.build.steps.[1].uses
+local: []
+docker: []
+dynamic: []
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index 1926b0f13..cce65668b 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -18,7 +18,7 @@ jobs:
       uses: actions/checkout@v2
 
     - name: build and push docker image
-      uses: mr-smithers-excellent/docker-build-push@v5
+      uses: mr-smithers-excellent/docker-build-push@0e68818ea37ba7728f417f03a58e06e68d9d2592 # v5
       with:
         image: errbotio/errbot
         tags: latest