diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 16bb411aa..897b18eb6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -135,7 +135,7 @@ jobs:
         steps:
             - uses: actions/checkout@v6
 
-            - uses: pnpm/action-setup@v4
+            - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4
               with:
                   version: latest
 
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 65ca8bdf0..560d3008c 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -14,7 +14,7 @@ jobs:
     release-please:
         runs-on: ubuntu-latest
         steps:
-            - uses: googleapis/release-please-action@v4
+            - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
               id: release
               with:
                   token: ${{secrets.GITHUB_TOKEN}}