diff --git a/.gitea/workflows/compose-services-readme.yml b/.gitea/workflows/compose-services-readme.yml
index 13787ad6..8b043a62 100644
--- a/.gitea/workflows/compose-services-readme.yml
+++ b/.gitea/workflows/compose-services-readme.yml
@@ -12,13 +12,13 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         with:
           ref: main
 
       - name: Generate system info (ANSI preserved)
         id: gen-sysinfo
-        uses: appleboy/ssh-action@v1.2.3
+        uses: appleboy/ssh-action@91f3272fc5907f4699dcf59761eb622a07342f5a # v1.2.3
         with:
           host: 192.168.1.254
           username: charish
@@ -41,7 +41,7 @@ jobs:
           yq 'explode(.) | .services | to_entries | map({"service": .key, "image": (.value.image | sub("@sha256:.*$"; "")), "description": (.value.labels."homepage.description" // "")})' docker-compose.yml > services.yml
 
       - name: Generate Markdown Table
-        uses: gazab/create-markdown-table@v1.0.7
+        uses: gazab/create-markdown-table@6686233d7008e8d8b9d4bbdbfd1fb1ae510019f0 # v1.0.7
         id: service-table
         with:
           file: ./services.yml
@@ -63,7 +63,7 @@ jobs:
           } > README.md
 
       - name: Add/Commit README.md
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
         with:
           message: "chore: Update README"
           add: "README.md"