diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml
index 4aaf578a..626fb5b8 100644
--- a/.github/workflows/acceptance.yml
+++ b/.github/workflows/acceptance.yml
@@ -58,7 +58,7 @@ jobs:
         id: setup-cloudstack
         with:
           cloudstack-version: ${{ matrix.cloudstack-version }}
-      - uses: hashicorp/setup-terraform@v4
+      - uses: hashicorp/setup-terraform@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85
         with:
           terraform_version: ${{ matrix.terraform-version }}
           terraform_wrapper: false
diff --git a/.github/workflows/rat.yaml b/.github/workflows/rat.yaml
index 35cd44f9..41b20dc4 100644
--- a/.github/workflows/rat.yaml
+++ b/.github/workflows/rat.yaml
@@ -25,12 +25,12 @@ jobs:
 
       - name: Download Apache RAT
         run: |
-          curl -L -O https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz
-          tar -xzf apache-rat-0.17-bin.tar.gz
+          curl -L -O https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz
+          tar -xzf apache-rat-0.18-bin.tar.gz
 
       - name: Run RAT
         run: |
-          java -jar apache-rat-0.17/apache-rat-0.17.jar -d . -E .rat-excludes > rat-report.txt
+          java -jar apache-rat-0.18/apache-rat-0.18.jar -d . -E .rat-excludes > rat-report.txt
           cat rat-report.txt
           # Fail if unapproved licenses are found
           grep -qe '^\s*Unapproved:\s*0\s*A count of unapproved licenses.$' rat-report.txt && exit 0 || exit 1