diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 178c6a3b60..da849743f7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -93,7 +93,7 @@ jobs:
 
     - name: Configure fast APT repository mirror
       if: runner.os == 'Linux'
-      uses: vegardit/fast-apt-mirror.sh@v1
+      uses: vegardit/fast-apt-mirror.sh@806c59276adfff2df420124ad5e4587f018c358a # v1
 
 
     - name: "Install: Linux packages 📦"
diff --git a/.github/workflows/licensecheck.yml b/.github/workflows/licensecheck.yml
index eea056612e..83cc726a21 100644
--- a/.github/workflows/licensecheck.yml
+++ b/.github/workflows/licensecheck.yml
@@ -79,7 +79,7 @@ jobs:
         java-version: '25'
         distribution: 'temurin'
     - name: Set up Maven
-      uses: stCarolas/setup-maven@v5.1
+      uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
       with:
         maven-version: 3.9.16
     - name: Cache local Maven repository