diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 720d286..a4c7164 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: 'Setup Java JDK 11'
-        uses: actions/setup-java@v4.7.1
+        uses: actions/setup-java@v4.9.1
         with:
           distribution: 'microsoft'
           java-version: '11'
diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
index 3f79ecb..72d7555 100644
--- a/.github/workflows/lock.yml
+++ b/.github/workflows/lock.yml
@@ -16,7 +16,7 @@ jobs:
   action:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v5
+      - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5
         with:
           github-token: ${{ github.token }}
           issue-inactive-days: '14'