diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f3350cc..a43648a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.4.0
         with:
           go-version-file: code-dispatcher/go.mod
           cache: false
diff --git a/.github/workflows/release-latest.yml b/.github/workflows/release-latest.yml
index 1098087..8934831 100644
--- a/.github/workflows/release-latest.yml
+++ b/.github/workflows/release-latest.yml
@@ -20,10 +20,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.4.0
         with:
           go-version-file: code-dispatcher/go.mod
           cache: false
@@ -43,7 +43,7 @@ jobs:
           sha256sum code-dispatcher-* > SHA256SUMS
 
       - name: Generate artifact attestations
-        uses: actions/attest@v4
+        uses: actions/attest@v4.1.0
         with:
           subject-path: |
             dist/code-dispatcher-*