diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5e411d43..e4095850 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           lfs: true
       - run: bash .github/scripts/validate-apple-artifacts.sh . all
@@ -95,7 +95,7 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           lfs: true
 
@@ -221,9 +221,9 @@ jobs:
           EOF
 
       - if: matrix.targetPlatform == 'Android'
-        uses: jlumbroso/free-disk-space@v1.3.1
+        uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
 
-      - uses: game-ci/unity-builder@v4
+      - uses: game-ci/unity-builder@adaf7cd8f42fd48fbbf2d4f5f67ca30d87f819f1 # v5.0.1
         id: unity-build
         name: Build game for platform ${{ matrix.targetPlatform }}
         continue-on-error: ${{ matrix.allowFailure == true }}
@@ -258,7 +258,7 @@ jobs:
         id: ios-editor-artifacts
         if: ${{ always() && matrix.iosSdk != '' }}
         continue-on-error: ${{ matrix.allowFailure == true }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: ios-editor-${{ matrix.unityVersion }}-${{ matrix.iosSdk }}
           path: artifacts/ios-editor/
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index f2ec8a7d..693975e7 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Run result-checker unit tests
         run: >-
@@ -36,7 +36,7 @@ jobs:
           - 6000.3.7f1
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           lfs: true
 
@@ -46,7 +46,7 @@ jobs:
           mv Editor Runtime Tests Android iOS Mac Windows package.json ${{ matrix.projectPath }}/
 
       - name: Run Tests
-        uses: game-ci/unity-test-runner@v4
+        uses: game-ci/unity-test-runner@32e57712352b500e17974b245a6dce9e11a73213 # v4.4.0
         env:
           UNITY_EMAIL: ${{ secrets.UNITY_EMAIL }}
           UNITY_PASSWORD: ${{ secrets.UNITY_PASSWORD }}