diff --git a/.github/workflows/checkDependencies.yml b/.github/workflows/checkDependencies.yml
index 2bdbfa78d61..94615233ef8 100644
--- a/.github/workflows/checkDependencies.yml
+++ b/.github/workflows/checkDependencies.yml
@@ -78,7 +78,7 @@ jobs:
           fetch-depth: 0
           ref: master
       - name: Set up Maven
-        uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
+        uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
         with:
           maven-version: ${{ inputs.mavenVersion }}
       - name: Set up JDK
diff --git a/.github/workflows/checkMergeCommits.yml b/.github/workflows/checkMergeCommits.yml
index cff097269e8..b0c86f2204d 100644
--- a/.github/workflows/checkMergeCommits.yml
+++ b/.github/workflows/checkMergeCommits.yml
@@ -14,7 +14,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Block Merge Commits
-        uses: Morishiri/block-merge-commits-action@a4554c78def8d874966a8d1e20e2971121443755
+        uses: Morishiri/block-merge-commits-action@a4554c78def8d874966a8d1e20e2971121443755 # v1.0.1
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Update Message
diff --git a/.github/workflows/checkVersions.yml b/.github/workflows/checkVersions.yml
index 4c0abe6d53f..944691e52f6 100644
--- a/.github/workflows/checkVersions.yml
+++ b/.github/workflows/checkVersions.yml
@@ -64,7 +64,7 @@ jobs:
           version-check-${{ runner.os }}-maven-
 
     - name: Set up Maven
-      uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
+      uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
       with:
         maven-version: 3.9.14
 
diff --git a/.github/workflows/cleanCode.yml b/.github/workflows/cleanCode.yml
index 48771a2f588..50c84bbfabf 100644
--- a/.github/workflows/cleanCode.yml
+++ b/.github/workflows/cleanCode.yml
@@ -115,7 +115,7 @@ jobs:
           fetch-depth: 0
           ref: ${{ inputs.branch }}
       - name: Set up Maven
-        uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
+        uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
         if: ${{ fromJson(steps.list-prs.outputs.prs)[9] == null }}
         with:
           maven-version: ${{ inputs.mavenVersion }}
diff --git a/.github/workflows/codeQLworkflow.yml b/.github/workflows/codeQLworkflow.yml
index 3348662aa24..86feab52a95 100644
--- a/.github/workflows/codeQLworkflow.yml
+++ b/.github/workflows/codeQLworkflow.yml
@@ -78,7 +78,7 @@ jobs:
         distribution: 'temurin'
         cache: maven
     - name: Set up Maven
-      uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
+      uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
       with:
         maven-version: ${{ inputs.mavenVersion }}
 
diff --git a/.github/workflows/mavenBuild.yml b/.github/workflows/mavenBuild.yml
index 5754b38c225..23946e6b41b 100644
--- a/.github/workflows/mavenBuild.yml
+++ b/.github/workflows/mavenBuild.yml
@@ -73,7 +73,7 @@ jobs:
         distribution: 'temurin'
         cache: maven
     - name: Set up Maven
-      uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
+      uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
       with:
         maven-version: ${{ inputs.mavenVersion }}
 
diff --git a/.github/workflows/publishTestResults.yml b/.github/workflows/publishTestResults.yml
index 0da53ea9859..43ad41e7dee 100644
--- a/.github/workflows/publishTestResults.yml
+++ b/.github/workflows/publishTestResults.yml
@@ -72,7 +72,7 @@ jobs:
 
       - name: Create badge
         if: github.ref == 'refs/heads/master' && inputs.gist-url != ''
-        uses: emibcn/badge-action@f9150fde070fcca0c4e832437611b44838fcd325
+        uses: emibcn/badge-action@f9150fde070fcca0c4e832437611b44838fcd325 # v2.0.4
         with:
           label: Tests
           status: '${{ fromJSON( steps.test-results.outputs.json ).formatted.stats.tests_succ }} passed, ${{ fromJSON( steps.test-results.outputs.json ).formatted.stats.tests_fail }} failed'
@@ -81,7 +81,7 @@ jobs:
 
       - name: Upload badge to Gist
         if: github.ref == 'refs/heads/master' && inputs.gist-url != ''
-        uses: andymckay/append-gist-action@ab30bf28df67017c7ad696500b218558c7c04db3
+        uses: andymckay/append-gist-action@ab30bf28df67017c7ad696500b218558c7c04db3 # 0.3
         with:
           token: ${{ secrets.gist-token }}
           gistURL: ${{ inputs.gist-url }}
diff --git a/.github/workflows/updateTarget.yml b/.github/workflows/updateTarget.yml
index af82912564e..3f1ae253f8b 100644
--- a/.github/workflows/updateTarget.yml
+++ b/.github/workflows/updateTarget.yml
@@ -30,7 +30,7 @@ jobs:
         fetch-depth: 0
         ref: ${{ inputs.branch }}
     - name: Set up Maven
-      uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
+      uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
       with:
         maven-version: 3.9.14
     - name: Set up JDK