diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 7cd3d795c..a06a9bd66 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -9,8 +9,8 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: reviewdog/action-actionlint@v1
+      - uses: actions/checkout@v4.2.2
+      - uses: reviewdog/action-actionlint@v1.57.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           reporter: github-pr-review
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 84b55c146..3405efb27 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -32,11 +32,11 @@ jobs:
         build_bit: ['BUILD_64BIT=OFF', 'BUILD_64BIT=ON']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - name: checkout C2A core
         if: contains(matrix.use_c2a, 'ON')
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
         with:
           path: c2a-core
           repository: ut-issl/c2a-core
@@ -50,7 +50,7 @@ jobs:
         run: setup.bat
 
       - name: Configure build for x86
-        uses: ilammy/msvc-dev-cmd@v1
+        uses: ilammy/msvc-dev-cmd@v1.13.0
         with:
           arch: amd64_x86
 
@@ -61,7 +61,7 @@ jobs:
 
       - name: cache extlib
         id: cache-extlib
-        uses: actions/cache@v4
+        uses: actions/cache@v4.1.2
         with:
           key: extlib-${{ runner.os }}-${{ hashFiles('./ExtLibraries/**') }}-${{ matrix.build_bit }}
           path: ./ExtLibraries
@@ -153,7 +153,7 @@ jobs:
         build_bit: ['BUILD_64BIT=OFF', 'BUILD_64BIT=ON']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - name: set compiler
         id: compiler
@@ -185,7 +185,7 @@ jobs:
 
       - name: cache extlib
         id: cache-extlib
-        uses: actions/cache@v4
+        uses: actions/cache@v4.1.2
         with:
           key: extlib-${{ runner.os }}-${{ hashFiles('./ExtLibraries/**') }}-${{ matrix.build_bit }}
           path: ExtLibraries
diff --git a/.github/workflows/check-format.yml b/.github/workflows/check-format.yml
index e5d6b3ddf..0540fdbe3 100644
--- a/.github/workflows/check-format.yml
+++ b/.github/workflows/check-format.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/google-test.yml b/.github/workflows/google-test.yml
index aa36bc177..22f5eb304 100644
--- a/.github/workflows/google-test.yml
+++ b/.github/workflows/google-test.yml
@@ -24,13 +24,13 @@ jobs:
         compiler: ['gcc-11 g++-11', 'clang clang++']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - name: checkout the submodules
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
         with:
           submodules: recursive
-      
+
       - name: set compiler
         id: compiler
         run: |
@@ -61,7 +61,7 @@ jobs:
 
       - name: cache extlib
         id: cache-extlib
-        uses: actions/cache@v4
+        uses: actions/cache@v4.1.2
         with:
           key: extlib-${{ runner.os }}-${{ hashFiles('./ExtLibraries/**') }}}
           path: ExtLibraries
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index a99ffde5d..66456476d 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - name: Run Labeler
-        uses: crazy-max/ghaction-github-labeler@v5
+        uses: crazy-max/ghaction-github-labeler@v5.1.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           yaml-file: .github/labels.yml
diff --git a/.github/workflows/validate-renovate.yml b/.github/workflows/validate-renovate.yml
index 1bbffc0a5..f7dd58908 100644
--- a/.github/workflows/validate-renovate.yml
+++ b/.github/workflows/validate-renovate.yml
@@ -11,8 +11,8 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v4.2.2
+      - uses: actions/setup-node@v4.1.0
 
       - name: install
         run: |
diff --git a/.github/workflows/validate-scripts.yml b/.github/workflows/validate-scripts.yml
index 29a154f98..54a6a782d 100644
--- a/.github/workflows/validate-scripts.yml
+++ b/.github/workflows/validate-scripts.yml
@@ -19,7 +19,7 @@ jobs:
         script_dir: ['./scripts/Plot']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
       - name: read python version from Pipfile
         id: python-version