diff --git a/.github/actions/artifact-cache/action.yml b/.github/actions/artifact-cache/action.yml
index 0e14827d..d4e65f35 100644
--- a/.github/actions/artifact-cache/action.yml
+++ b/.github/actions/artifact-cache/action.yml
@@ -59,7 +59,7 @@ runs:
 
     - name: Restore artifact cache
       id: restore
-      uses: actions/cache@v5
+      uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
       with:
         path: ${{ steps.prepare.outputs.artifact-path }}
         key: ${{ steps.prepare.outputs.cache-key }}
diff --git a/.github/workflows/agents-auto-pilot.yml b/.github/workflows/agents-auto-pilot.yml
index 280ce348..e4ef43b0 100644
--- a/.github/workflows/agents-auto-pilot.yml
+++ b/.github/workflows/agents-auto-pilot.yml
@@ -222,7 +222,7 @@ jobs:
 
       - name: Cache pip (LLM requirements)
         if: steps.check_enabled.outputs.enabled == 'true'
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
         with:
           path: |
             ~/.cache/pip