diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 8e48c10b..3ded1423 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -36,8 +36,8 @@ jobs:
             os: windows-2025
             config: release
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-dotnet@v4
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0
       with:
         dotnet-version: '9.0.x'
     #  workaround for actions/setup-dotnet#155
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index eebf43d7..2e131bda 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -16,8 +16,8 @@ jobs:
     env:
       DevBuild: 'false'
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-dotnet@v4
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0
       with:
         dotnet-version: '9.0.x'
     - name: Create NuGet package