diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7e8e27d..046eaa9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -114,7 +114,7 @@ jobs:
         with:
           name: targets
           path: targets
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1
         with:
           ruby-version: '2.7'
       - name: Prepare RubyGems / ffi
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3187ddb..3dfd06f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -79,7 +79,7 @@ jobs:
       matrix:
         repo: ['api-client-go', 'api-client-java', 'api-client-python', 'api-client-ruby', 'api-client-typescript']
     steps:
-      - uses: ncipollo/release-action@v1.14.0
+      - uses: ncipollo/release-action@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5 # v1.14.0
         with:
           repo: ${{ matrix.repo }}
           token: ${{ secrets.BOT_TOKEN }}