diff --git a/.github/workflows/attack-coverage-update.yml b/.github/workflows/attack-coverage-update.yml
index 22110811427..6dd98c441af 100644
--- a/.github/workflows/attack-coverage-update.yml
+++ b/.github/workflows/attack-coverage-update.yml
@@ -45,7 +45,7 @@ jobs:
          git add docs-dev/"ATT\&CK-coverage.md"
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7.0.3
+        uses: peter-evans/create-pull-request@6cd32fd93684475c31847837f87bb135d40a2b79 # v7.0.3
         with:
           assignees: '${{github.actor}}'
           delete-branch: true
diff --git a/.github/workflows/kibana-mitre-update.yml b/.github/workflows/kibana-mitre-update.yml
index 7a6e165b70b..32e0e02484a 100644
--- a/.github/workflows/kibana-mitre-update.yml
+++ b/.github/workflows/kibana-mitre-update.yml
@@ -15,9 +15,8 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Get MITRE Attack changed files
-        if: false
         id: changed-attack-files
-        uses: tj-actions/changed-files@v44
+        uses: tj-actions/changed-files@v46
         with:
           files: detection_rules/etc/attack-v*.json.gz
 
diff --git a/.github/workflows/version-code-and-release.yml b/.github/workflows/version-code-and-release.yml
index 3ab8d0f5f03..2bd62d24bbb 100644
--- a/.github/workflows/version-code-and-release.yml
+++ b/.github/workflows/version-code-and-release.yml
@@ -92,7 +92,7 @@ jobs:
           git push origin "dev-v$version"
 
       - name: Run Release Drafter
-        uses: release-drafter/release-drafter@v6
+        uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
         with:
           config-name: release-drafter.yml
         env: