diff --git a/.github/workflows/build-validation.yml b/.github/workflows/build-validation.yml
index 7a8f34b..ced49c8 100644
--- a/.github/workflows/build-validation.yml
+++ b/.github/workflows/build-validation.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Get PR SHA
         id: sha
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           result-encoding: string
           script: |
@@ -23,12 +23,12 @@ jobs:
               pull_number: number,
             });
             return pr.data.head.sha
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           ref: ${{ steps.sha.outputs.result }}
           fetch-depth: 0
       - name: Make Build
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
         with:
           python-version: 3.x
       - run: |
@@ -36,7 +36,7 @@ jobs:
           mkdocs build -s
       - name: Message failure
         if: ${{ failure() }}
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             github.rest.issues.createComment({
diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
index 0f07d3a..f330882 100644
--- a/.github/workflows/issues.yml
+++ b/.github/workflows/issues.yml
@@ -5,7 +5,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: add-new-issues-to-repository-based-project-column
-        uses: docker://takanabe/github-actions-automate-projects:v0.0.1
+        uses: docker://takanabe/github-actions-automate-projects:v0.0.1@sha256:16a589147dec088f73735a477f274135595ab90d414aba76b6c1e0d65df8f73c
         if: github.event_name == 'issues' && github.event.action == 'opened'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/manual-validation.yml b/.github/workflows/manual-validation.yml
index 4b0b1cf..ab237fc 100644
--- a/.github/workflows/manual-validation.yml
+++ b/.github/workflows/manual-validation.yml
@@ -11,7 +11,7 @@ jobs:
     if: ${{ github.event.issue.pull_request && github.repository_owner == 'ffxivita' && github.event.comment.body == 'check build' }}
     steps:
       - name: React to comment
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             const {owner, repo} = context.issue;
@@ -23,7 +23,7 @@ jobs:
             });
       - name: Get PR SHA
         id: sha
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           result-encoding: string
           script: |
@@ -34,12 +34,12 @@ jobs:
               pull_number: number,
             });
             return pr.data.head.sha
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           ref: ${{ steps.sha.outputs.result }}
           fetch-depth: 0
       - name: Make Build
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
         with:
           python-version: 3.x
       - run: |
@@ -47,7 +47,7 @@ jobs:
           mkdocs build -s
       - name: Message success
         if: ${{ success() }}
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             github.rest.issues.createComment({
@@ -58,7 +58,7 @@ jobs:
             });
       - name: Message failure
         if: ${{ failure() }}
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             github.rest.issues.createComment({
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index fed7dee..006a962 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -7,6 +7,6 @@ jobs:
   title:
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v3.4.5
+      - uses: amannn/action-semantic-pull-request@4feeedbc065232b05e657d69d072355d0c7cb8ea # v3.4.5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file