diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 08f6d52..eee73d6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.5.0
         with:
           go-version-file: code-dispatcher/go.mod
           cache: false
diff --git a/.github/workflows/release-latest.yml b/.github/workflows/release-latest.yml
index 87a57b8..599d57a 100644
--- a/.github/workflows/release-latest.yml
+++ b/.github/workflows/release-latest.yml
@@ -20,10 +20,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.5.0
         with:
           go-version-file: code-dispatcher/go.mod
           cache: false
@@ -40,7 +40,7 @@ jobs:
           sha256sum code-dispatcher-* > SHA256SUMS
 
       - name: Generate artifact attestations
-        uses: actions/attest@v4
+        uses: actions/attest@v4.1.0
         with:
           subject-path: |
             dist/code-dispatcher-*