diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index 3c23094d14..1c501e9697 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -574,10 +574,10 @@ jobs:
       matrix:
         version: ["14.0", "13.2"]
     steps:
-    - uses: actions/checkout@v4.1.7
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Test in FreeBSD
       id: test
-      uses: vmactions/freebsd-vm@v1
+      uses: vmactions/freebsd-vm@12c207ac1ba13827f25726fe93f9c2e6f685f0f3 # v1.0.8
       with:
         release: ${{ matrix.version }}
         usesh: true
diff --git a/.github/workflows/doxygen.yml b/.github/workflows/doxygen.yml
index 91d4a8fd4f..857767a2c5 100644
--- a/.github/workflows/doxygen.yml
+++ b/.github/workflows/doxygen.yml
@@ -37,7 +37,7 @@ jobs:
 
       - name: Upload documentation
         if: github.ref == 'refs/heads/master'
-        uses: cpina/github-action-push-to-another-repository@main
+        uses: cpina/github-action-push-to-another-repository@07c4d7b3def0a8ebe788a8f2c843a4e1de4f6900 # main
         env:
           SSH_DEPLOY_KEY: ${{ secrets.SSH_DEPLOY_KEY }}
         with: