diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index b5829c9..796d340 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -22,7 +22,7 @@ jobs:
   all:
     if: github.run_id != 1
     name: Build & Tests
-    uses: dailydevops/pipelines/.github/workflows/build-dotnet-single.yml@1.2.28
+    uses: dailydevops/pipelines/.github/workflows/build-dotnet-single.yml@615742a7d420dfa5b5f87c279f119f1db055bb3b # 1.2.28
     with:
       dotnetLogging: ${{ inputs.dotnet-logging || 'minimal' }}
       dotnetVersion: ${{ vars.NE_DOTNET_TARGETFRAMEWORKS }}
diff --git a/.github/workflows/publish-nuget.yml b/.github/workflows/publish-nuget.yml
index dbe458b..5e9129f 100644
--- a/.github/workflows/publish-nuget.yml
+++ b/.github/workflows/publish-nuget.yml
@@ -18,7 +18,7 @@ jobs:
   nuget:
     name: Publish
     if: ${{ github.event.workflow_run.conclusion == 'success' && github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' }}
-    uses: dailydevops/pipelines/.github/workflows/publish-nuget.yml@1.2.28
+    uses: dailydevops/pipelines/.github/workflows/publish-nuget.yml@615742a7d420dfa5b5f87c279f119f1db055bb3b # 1.2.28
     with:
       workflowName: ${{ github.event.workflow_run.name }}
       artifactPattern: release-packages-*
diff --git a/.github/workflows/update-license.yml b/.github/workflows/update-license.yml
index 42ad82c..cf2cf55 100644
--- a/.github/workflows/update-license.yml
+++ b/.github/workflows/update-license.yml
@@ -15,11 +15,11 @@ jobs:
     steps:
 
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       with:
         fetch-depth: 0
 
-    - uses: FantasticFiasco/action-update-license-year@v3
+    - uses: FantasticFiasco/action-update-license-year@d837fc83ecb71196807bdf3854208f556e66f6ed # v3
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         prTitle: 'chore: Updated LICENSE'