diff --git a/.github/actions/setup-macos-aarch64-builder/action.yaml b/.github/actions/setup-macos-aarch64-builder/action.yaml
index 288799a284b0..dd668b8c1204 100644
--- a/.github/actions/setup-macos-aarch64-builder/action.yaml
+++ b/.github/actions/setup-macos-aarch64-builder/action.yaml
@@ -16,12 +16,12 @@
 # under the License.
 
 name: Prepare Rust Builder for MacOS
-description: 'Prepare Rust Build Environment for MacOS'
+description: "Prepare Rust Build Environment for MacOS"
 inputs:
   rust-version:
-    description: 'version of rust to install (e.g. stable)'
+    description: "version of rust to install (e.g. stable)"
     required: true
-    default: 'stable'
+    default: "stable"
 runs:
   using: "composite"
   steps:
@@ -44,6 +44,6 @@ runs:
         rustup default stable
         rustup component add rustfmt
     - name: Setup rust cache
-      uses: Swatinem/rust-cache@v2
+      uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6
     - name: Configure rust runtime env
-      uses: ./.github/actions/setup-rust-runtime        
+      uses: ./.github/actions/setup-rust-runtime
diff --git a/.github/actions/setup-rust-runtime/action.yaml b/.github/actions/setup-rust-runtime/action.yaml
index cd18be989031..36f49a25fe71 100644
--- a/.github/actions/setup-rust-runtime/action.yaml
+++ b/.github/actions/setup-rust-runtime/action.yaml
@@ -16,18 +16,18 @@
 # under the License.
 
 name: Setup Rust Runtime
-description: 'Setup Rust Runtime Environment'
+description: "Setup Rust Runtime Environment"
 runs:
   using: "composite"
   steps:
     - name: Run sccache-cache
-      uses: mozilla-actions/sccache-action@v0.0.4
+      uses: mozilla-actions/sccache-action@2e7f9ec7921547d4b46598398ca573513895d0bd
     - name: Configure runtime env
       shell: bash
       # do not produce debug symbols to keep memory usage down
       # hardcoding other profile params to avoid profile override values
       # More on Cargo profiles https://doc.rust-lang.org/cargo/reference/profiles.html?profile-settings#profile-settings
-      # 
+      #
       # Set debuginfo=line-tables-only as debuginfo=0 causes immensely slow build
       # See for more details: https://github.com/rust-lang/rust/issues/119560
       run: |
@@ -35,4 +35,3 @@ runs:
         echo "SCCACHE_GHA_ENABLED=true" >> $GITHUB_ENV 
         echo "RUST_BACKTRACE=1" >> $GITHUB_ENV
         echo "RUSTFLAGS=-C debuginfo=line-tables-only -C incremental=false" >> $GITHUB_ENV
-     
diff --git a/.github/workflows/dev.yml b/.github/workflows/dev.yml
index aa4bd862e09e..e14e80273931 100644
--- a/.github/workflows/dev.yml
+++ b/.github/workflows/dev.yml
@@ -28,7 +28,7 @@ jobs:
     name: Check License Header
     steps:
       - uses: actions/checkout@v4
-      - uses: korandoru/hawkeye@v6
+      - uses: korandoru/hawkeye@dd74178a96f27b1121447c6b4a4ccfce180d5bf7
 
   prettier:
     name: Use prettier to check formatting of documents
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 599e6e3cc3eb..147824da50c7 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -45,7 +45,7 @@ jobs:
     name: Check License Header
     steps:
       - uses: actions/checkout@v4
-      - uses: korandoru/hawkeye@v6
+      - uses: korandoru/hawkeye@dd74178a96f27b1121447c6b4a4ccfce180d5bf7
 
   # Check crate compiles and base cargo check passes
   linux-build-lib:
@@ -153,7 +153,6 @@ jobs:
       - name: Check datafusion-proto (avro)
         run: cargo check --profile ci --no-default-features -p datafusion-proto --features=avro
 
-
   # Check datafusion crate features
   #
   # Ensure via `cargo check` that the crate can be built with a
@@ -324,7 +323,6 @@ jobs:
         if: ${{ !cancelled() }}
         run: docker logs minio-container
 
-
   linux-test-example:
     name: cargo examples (amd64)
     needs: linux-build-lib