diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 252e2d32..82dbaa20 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           cache: "npm"
-      - uses: dfinity/setup-dfx@main
+      - uses: dfinity/setup-dfx@e50c04f104ee4285ec010f10609483cf41e4d365 # main
 
       - uses: ./.github/actions/cache-rust-wasm
 
@@ -111,7 +111,7 @@ jobs:
         with:
           node-version: 22
           cache: "npm"
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
       - uses: ./.github/actions/cache-rust-wasm
 
       - name: Install npm packages
diff --git a/.github/workflows/cli-bundle.yml b/.github/workflows/cli-bundle.yml
index fb596cbd..c6852e5e 100644
--- a/.github/workflows/cli-bundle.yml
+++ b/.github/workflows/cli-bundle.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1.2.2
         with:
           bun-version: 1.2.17
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
diff --git a/.github/workflows/mops-test.yml b/.github/workflows/mops-test.yml
index b6e3897b..00ab0506 100644
--- a/.github/workflows/mops-test.yml
+++ b/.github/workflows/mops-test.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           cache: "npm"
-      - uses: dfinity/setup-dfx@main
+      - uses: dfinity/setup-dfx@e50c04f104ee4285ec010f10609483cf41e4d365 # main
       - run: dfx cache install
       - name: Cache mops packages
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
diff --git a/.github/workflows/setup-mops.yml b/.github/workflows/setup-mops.yml
index 26849047..5b0ebdad 100644
--- a/.github/workflows/setup-mops.yml
+++ b/.github/workflows/setup-mops.yml
@@ -16,8 +16,8 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
-      - uses: dfinity/setup-dfx@main
-      - uses: dfinity/setup-mops@v1
+      - uses: dfinity/setup-dfx@e50c04f104ee4285ec010f10609483cf41e4d365 # main
+      - uses: dfinity/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 1.0.0
       - name: Run tests