diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 281293b5f..51bc77b65 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -13,7 +13,7 @@ jobs:
     steps:
     
       - name: Generate Token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
@@ -21,7 +21,7 @@ jobs:
 
       - name: Get Previous Release Tag and Determine Next Tag
         id: determine-next-tag
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           github-token: "${{ steps.app-token.outputs.token }}"
           result-encoding: string
@@ -55,7 +55,7 @@ jobs:
             return `${nextMajorMinor}.${nextPatch}`;
 
       - name: Create Release
-        uses: ncipollo/release-action@v1
+        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1
         with:
           generateReleaseNotes: true
           tag: "${{ steps.determine-next-tag.outputs.result }}"