diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dae5312..cf82902 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
       -
         name: Unshallow
         run: git fetch --prune --unshallow
@@ -41,7 +41,7 @@ jobs:
           PASSPHRASE: ${{ secrets.PASSPHRASE }}
       -
         name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v2.5.0
         with:
           version: latest
           args: release --rm-dist
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 0386c72..9320686 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -24,14 +24,14 @@ jobs:
       id: go
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v2.3.3
+      uses: actions/checkout@v2.3.4
 
     - name: Get dependencies
       run: |
         go mod download
 
     - name: Lint
-      uses: golangci/golangci-lint-action@v2
+      uses: golangci/golangci-lint-action@v2.5.2
       with:
         version: v1.33
 
@@ -63,7 +63,7 @@ jobs:
       id: go
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v2
+      uses: actions/checkout@v2.3.4
 
     - name: Get dependencies
       run: |
@@ -81,7 +81,7 @@ jobs:
         go test -v -coverprofile=coverage.out ./internal/provider/
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v1
+      uses: codecov/codecov-action@v1.5.0
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         file: ./coverage.out