diff --git a/.github/workflows/bump-version-cut-release.yaml b/.github/workflows/bump-version-cut-release.yaml
index c483855..3943a91 100644
--- a/.github/workflows/bump-version-cut-release.yaml
+++ b/.github/workflows/bump-version-cut-release.yaml
@@ -11,19 +11,19 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       with:
         fetch-depth: '0'
 
     - name: Bump version and push tag
-      uses: anothrNick/github-tag-action@v1 # Don't use @master or @v1 unless you're happy to test the latest version
+      uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1 # Don't use @master or @v1 unless you're happy to test the latest version
       id: tag_version
       env:
         GITHUB_TOKEN: ${{ secrets.token }} 
         TAG_PREFIX: v
 
     - name: Create a GitHub release
-      uses: ncipollo/release-action@v1
+      uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1
       with:
           tag: ${{ steps.tag_version.outputs.new_tag }}
           name: ${{ steps.tag_version.outputs.new_tag }}