diff --git a/.github/workflows/header-check.yml b/.github/workflows/header-check.yml
index 4dec929..9ad68f1 100644
--- a/.github/workflows/header-check.yml
+++ b/.github/workflows/header-check.yml
@@ -27,4 +27,4 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Check License Header
-        uses: apache/skywalking-eyes/header@98a5d1362e26852204382ca749ed66631f15a95d # main
+        uses: apache/skywalking-eyes/header@e910f72bae86171d727742c25f8a4555b7b83893 # main
diff --git a/.github/workflows/skills-validate.yml b/.github/workflows/skills-validate.yml
index 97d2ca1..b6d8f03 100644
--- a/.github/workflows/skills-validate.yml
+++ b/.github/workflows/skills-validate.yml
@@ -29,9 +29,9 @@ jobs:
   skills-validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.11"
       - name: Install skills-ref