diff --git a/.gitea/workflows/dag-config-check.yml b/.gitea/workflows/dag-config-check.yml
index 30111db..a2c2336 100644
--- a/.gitea/workflows/dag-config-check.yml
+++ b/.gitea/workflows/dag-config-check.yml
@@ -36,7 +36,7 @@ jobs:
           version: "11.4.0"
 
       - name: Cache Ansible Galaxy Collections
-        uses: actions/cache@v3
+        uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # v3.0.11
         with:
           path: collections
           key: ${{ runner.os }}-ansible-${{ hashFiles('./collections/requirements.yml') }}
diff --git a/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml b/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml
index a1bccc3..9eb390f 100644
--- a/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml
+++ b/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml
@@ -91,7 +91,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Cache Ansible Galaxy Collections
-        uses: actions/cache@v3
+        uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # v3.0.11
         with:
           path: collections
           key: ${{ runner.os }}-ansible-${{ hashFiles('./collections/requirements.yml') }}
@@ -197,7 +197,7 @@ jobs:
           ref: main
 
       - name: Cache Ansible Galaxy Collections
-        uses: actions/cache@v3
+        uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # v3.0.11
         with:
           path: collections
           key: ${{ runner.os }}-ansible-${{ hashFiles('./collections/requirements.yml') }}