diff --git a/.gitea/workflows/hugo-content-deployment.yml b/.gitea/workflows/hugo-content-deployment.yml
index 9bd5995..672100c 100644
--- a/.gitea/workflows/hugo-content-deployment.yml
+++ b/.gitea/workflows/hugo-content-deployment.yml
@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 1
       - name: Cache tea CLI
         id: cache-tea
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: /opt/hostedtoolcache/tea/${{ env.TEA_VERSION }}/x64
           key: tea-${{ runner.os }}-${{ env.TEA_VERSION }}
@@ -111,7 +111,7 @@ jobs:
         uses: actions/checkout@v4
       - name: Cache tea CLI
         id: cache-tea
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: /opt/hostedtoolcache/tea/${{ env.TEA_VERSION }}/x64
           key: tea-${{ runner.os }}-${{ env.TEA_VERSION }}
diff --git a/.gitea/workflows/hugo-translation-deployment.yml b/.gitea/workflows/hugo-translation-deployment.yml
index f2d526a..e9ccadd 100644
--- a/.gitea/workflows/hugo-translation-deployment.yml
+++ b/.gitea/workflows/hugo-translation-deployment.yml
@@ -98,7 +98,7 @@ jobs:
         uses: actions/checkout@v4
       - name: Cache tea CLI
         id: cache-tea
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: /opt/hostedtoolcache/tea/${{ env.TEA_VERSION }}/x64
           key: tea-${{ runner.os }}-${{ env.TEA_VERSION }}