diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index abb7b62..5e119dd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,10 +33,10 @@ jobs:
     runs-on: 'ubuntu-latest'
     name: 'Tests'
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1'
 
       - name: 'Setup Go environment'
-        uses: 'actions/setup-go@v4'
+        uses: 'actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0'
         with:
           go-version: '1.24.x'
 
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index a078dd6..6481c19 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -34,10 +34,10 @@ jobs:
     name: 'Lint Go files'
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1'
 
       - name: 'Setup Go environment'
-        uses: 'actions/setup-go@v4'
+        uses: 'actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0'
         with:
           go-version: '1.24.x'