diff --git a/.gitea/workflows/pr-cloudflare-docker-deploy.yml b/.gitea/workflows/pr-cloudflare-docker-deploy.yml
index 9eee26d5..d5af09e9 100644
--- a/.gitea/workflows/pr-cloudflare-docker-deploy.yml
+++ b/.gitea/workflows/pr-cloudflare-docker-deploy.yml
@@ -165,7 +165,7 @@ jobs:
       #     docker login -u gitea-sonarqube-bot -p ${RINOA_REGISTRY_PASSWORD} git.trez.wtf
 
       - name: Login to registries
-        uses: docker/login-action@v3
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with:
           registry-auth: |
             - username: ${{ secrets.DOCKERHUB_USER }}
@@ -418,7 +418,7 @@ jobs:
       #       git.trez.wtf
 
       - name: Login to registries
-        uses: docker/login-action@v3
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with:
           registry-auth: |
             - username: ${{ secrets.DOCKERHUB_USER }}
diff --git a/.gitea/workflows/renovate-pr-deploy.yml b/.gitea/workflows/renovate-pr-deploy.yml
index f4629115..52bdab47 100644
--- a/.gitea/workflows/renovate-pr-deploy.yml
+++ b/.gitea/workflows/renovate-pr-deploy.yml
@@ -99,7 +99,7 @@ jobs:
           notification_message: "Starting Docker Compose run..."
 
       - name: Login to registries
-        uses: docker/login-action@v3
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with:
           registry-auth: |
             - username: ${{ secrets.DOCKERHUB_USER }}