diff --git a/.gitea/workflows/dag-config-check.yml b/.gitea/workflows/dag-config-check.yml
index fab7916..c7f1258 100644
--- a/.gitea/workflows/dag-config-check.yml
+++ b/.gitea/workflows/dag-config-check.yml
@@ -30,7 +30,7 @@ jobs:
           notification_message: "Setting up Ansible and Vault... 🏗️"
 
       - name: Install Ansible
-        uses: alex-oleshkevich/setup-ansible@v1.0.1
+        uses: alex-oleshkevich/setup-ansible@f879ce3cf11a7315e130919a797526b0c6bfd272 # v1.0.1
         with:
           version: "11.4.0"
 
diff --git a/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml b/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml
index c97ee33..955d1ac 100644
--- a/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml
+++ b/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml
@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           fetch-depth: 1
 
@@ -88,7 +88,7 @@ jobs:
       VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Cache Ansible Galaxy Collections
         uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
@@ -99,7 +99,7 @@ jobs:
             ${{ runner.os }}-ansible-
 
       - name: Install Ansible
-        uses: alex-oleshkevich/setup-ansible@v1.0.1
+        uses: alex-oleshkevich/setup-ansible@f879ce3cf11a7315e130919a797526b0c6bfd272 # v1.0.1
         with:
           version: "11.4.0"
 
@@ -128,7 +128,7 @@ jobs:
           notification_message: "Starting dry run for ${{ matrix.host }}..."
 
       - name: Run Ansible Dry Run
-        uses: dawidd6/action-ansible-playbook@v3
+        uses: dawidd6/action-ansible-playbook@a4133a9690f77b38c8227021ed497fc1267635d5 # v3
         with:
           directory: .
           playbook: tar-valon_config_deploy.yml
@@ -154,7 +154,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Install tea
         uses: supplypike/setup-bin@8e3f88b4f143d9b5c3497f0fc12d45c83c123787 # v4.0.1
@@ -192,7 +192,7 @@ jobs:
       VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           ref: main
 
@@ -205,7 +205,7 @@ jobs:
             ${{ runner.os }}-ansible-
 
       - name: Install Ansible
-        uses: alex-oleshkevich/setup-ansible@v1.0.1
+        uses: alex-oleshkevich/setup-ansible@f879ce3cf11a7315e130919a797526b0c6bfd272 # v1.0.1
         with:
           version: "11.4.0"
 
@@ -234,7 +234,7 @@ jobs:
           notification_message: "Deploying configs to ${{ matrix.host }}..."
 
       - name: Run Ansible Config Deployment
-        uses: dawidd6/action-ansible-playbook@v3
+        uses: dawidd6/action-ansible-playbook@a4133a9690f77b38c8227021ed497fc1267635d5 # v3
         with:
           directory: .
           playbook: tar-valon_config_deploy.yml