diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index 056981a..b868777 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -39,23 +39,26 @@ jobs:
           - '3.0.7'
           - '2.7.8'
     steps:
-    - uses: actions/checkout@v3
-    - name: Set up Ruby ${{ matrix.ruby }}
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: ${{ matrix.ruby }}
-        bundler-cache: true
-    - name: Run the default task
-      run: bundle exec rake
-    - name: Artifact coverage
-      if: ${{ ! cancelled() }}
-      # see https://github.com/actions/upload-artifact
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-      with:
-        name: '${{ env.TESTS_COVERAGE_ARTIFACT }}_ruby${{ matrix.ruby }}'
-        path: ${{ env.COVERAGE_DIR }}
-        if-no-files-found: error
-        retention-days: 7
+      - name: Checkout Code
+        # see https://github.com/actions/checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Set up Ruby ${{ matrix.ruby }}
+        # see https://github.com/ruby/setup-ruby
+        uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler-cache: true
+      - name: Run the default task
+        run: bundle exec rake
+      - name: Artifact coverage
+        if: ${{ ! cancelled() }}
+        # see https://github.com/actions/upload-artifact
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: '${{ env.TESTS_COVERAGE_ARTIFACT }}_ruby${{ matrix.ruby }}'
+          path: ${{ env.COVERAGE_DIR }}
+          if-no-files-found: error
+          retention-days: 7
   report-coverage:
     name: Publish test coverage
     needs: [ "test" ]