diff --git a/.github/workflows/build-report.yml b/.github/workflows/build-report.yml
index ee2c9bc..13719fd 100644
--- a/.github/workflows/build-report.yml
+++ b/.github/workflows/build-report.yml
@@ -51,18 +51,18 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
     - name: Download Jacoco report artifact
       uses: actions/download-artifact@v4
       with:
         name: jacoco-report
         path: target/site/jacoco
-    - uses: codecov/codecov-action@v5
+    - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a
       name: Send coverage to Codecov
       with:
         file: ./**/target/site/jacoco/jacoco.xml
         name: codecov
     - name: Send coverage to Codacy
-      uses: codacy/codacy-coverage-reporter-action@master
+      uses: codacy/codacy-coverage-reporter-action@89d6c85cfafaec52c72b6c5e8b2878d33104c699
       with:
         project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
diff --git a/.github/workflows/update-year.yml b/.github/workflows/update-year.yml
index 5342202..abf7aff 100644
--- a/.github/workflows/update-year.yml
+++ b/.github/workflows/update-year.yml
@@ -61,7 +61,7 @@ jobs:
       run: |
         find . -name 'pom.xml' | xargs sed -i 's/yyyy/'${{ github.event.inputs.aoc_year }}'/g'
     - name: Open Pull Request
-      uses: peter-evans/create-pull-request@v7
+      uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f
       id: pull-request
       with:
         token: ${{ secrets.GITHUB_TOKEN }}