diff --git a/.github/workflows/issues-first-greet.yml b/.github/workflows/issues-first-greet.yml
index 0942288..96f4ba5 100644
--- a/.github/workflows/issues-first-greet.yml
+++ b/.github/workflows/issues-first-greet.yml
@@ -15,7 +15,7 @@ jobs:
   greet:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/first-interaction@v1
+      - uses: actions/first-interaction@3c71ce730280171fd1cfb57c00c774f8998586f7 # v1
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # Respond to first time issue raisers.
diff --git a/.github/workflows/issues-label-actions.yml b/.github/workflows/issues-label-actions.yml
index 4a031b5..4ef3ee2 100644
--- a/.github/workflows/issues-label-actions.yml
+++ b/.github/workflows/issues-label-actions.yml
@@ -15,7 +15,7 @@ jobs:
   action:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/label-actions@v3
+      - uses: dessant/label-actions@ade7bcd4c1b30de6ba8e556cc31301fd4f79ca65 # v3
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           config-path: ".github/label-actions.yml"
diff --git a/.github/workflows/issues-stale.yml b/.github/workflows/issues-stale.yml
index ee3a065..9dd406f 100644
--- a/.github/workflows/issues-stale.yml
+++ b/.github/workflows/issues-stale.yml
@@ -15,7 +15,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v8
+      - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # Increase max operations.