diff --git a/.github/workflows/publish_site.yaml b/.github/workflows/publish_site.yaml
index 7429e895f1..27df6c6f5a 100644
--- a/.github/workflows/publish_site.yaml
+++ b/.github/workflows/publish_site.yaml
@@ -43,7 +43,7 @@ jobs:
 
       # Building and pushing container images.
       - name: Log in to the container registry
-        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
+        uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b #v2.0.0
         with:
           registry: ${{ env.GHCR }}
           username: ${{ github.actor }}
diff --git a/.github/workflows/publish_tool.yaml b/.github/workflows/publish_tool.yaml
index 1fdcb086ea..b3ba4f845f 100644
--- a/.github/workflows/publish_tool.yaml
+++ b/.github/workflows/publish_tool.yaml
@@ -24,7 +24,7 @@ jobs:
 
       # Login to push container images.
       - name: Log in to the container registry
-        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
+        uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b #v2.0.0
         with:
           registry: ${{ env.GHCR }}
           username: ${{ github.actor }}