diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 855e582..0a15e4c 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -21,11 +21,11 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install and login with up
         if: env.UP_API_TOKEN != '' && env.UP_ORG != ''
-        uses: upbound/action-up@v1
+        uses: upbound/action-up@53fe6395637d884c80d2bbc8c2d75d0ece776ced # v1
         with:
           api-token: ${{ secrets.UP_API_TOKEN }}
           organization: ${{ secrets.UP_ORG }}
@@ -40,7 +40,7 @@ jobs:
 
       - name: Build and Push Upbound project
         if: env.UP_API_TOKEN != ''
-        uses: upbound/action-up-project@v1
+        uses: upbound/action-up-project@87016022642d4076f1360639bdf0f04527c28983 # v1
         with:
           push-project: true
           tag: ${{ inputs.version || '' }}
diff --git a/.github/workflows/composition-tests.yaml b/.github/workflows/composition-tests.yaml
index e2f5677..5bd6cbe 100644
--- a/.github/workflows/composition-tests.yaml
+++ b/.github/workflows/composition-tests.yaml
@@ -12,10 +12,10 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install up
-        uses: upbound/action-up@v1
+        uses: upbound/action-up@53fe6395637d884c80d2bbc8c2d75d0ece776ced # v1
         with:
           skip-login: true
 
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 113f39c..6037dfe 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -22,11 +22,11 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install and login with up
         if: env.UP_API_TOKEN != '' && env.UP_ORG != ''
-        uses: upbound/action-up@v1
+        uses: upbound/action-up@53fe6395637d884c80d2bbc8c2d75d0ece776ced # v1
         with:
           api-token: ${{ env.UP_API_TOKEN }}
           organization: ${{ env.UP_ORG }}
diff --git a/.github/workflows/yamllint.yaml b/.github/workflows/yamllint.yaml
index acbb91b..f159c49 100644
--- a/.github/workflows/yamllint.yaml
+++ b/.github/workflows/yamllint.yaml
@@ -7,7 +7,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: yamllint
-        uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1.20.0
+        uses: reviewdog/action-yamllint@f01d8a48fd8d89f89895499fca2cff09f9e9e8c0 # v1.21.0
         with:
           reporter: github-pr-review
           filter_mode: nofilter