diff --git a/.github/actions/mkdocs-pages/action.yml b/.github/actions/mkdocs-pages/action.yml
index da75a17..5a97b37 100644
--- a/.github/actions/mkdocs-pages/action.yml
+++ b/.github/actions/mkdocs-pages/action.yml
@@ -32,11 +32,11 @@ runs:
   steps:
     - if: ${{ !inputs.docs_folder }}
       name: Checkout CI
-      uses: actions/checkout@v4
+      uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       with:
         sparse-checkout: .github
     - name: Checkout root
-      uses: actions/checkout@v4
+      uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       with:
         path: ${{ !inputs.docs_folder && 'docs' || '' }}
         sparse-checkout: |
@@ -48,7 +48,7 @@ runs:
         cp -rn ${{ github.action_path }}/default-docs/. 'docs/.';
         cp -rn ${{ github.action_path }}/. '.github/mkdocs/';
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
       with:
         python-version: 3.14
     - name: Install dependencies
diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
index 5fa12f9..8a44cb7 100644
--- a/.github/workflows/build-docs.yml
+++ b/.github/workflows/build-docs.yml
@@ -9,7 +9,7 @@ jobs:
   docs-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
       - uses: ./.github/actions/mkdocs-pages
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/pr-title-checker.yml b/.github/workflows/pr-title-checker.yml
index bb0ed12..5985005 100644
--- a/.github/workflows/pr-title-checker.yml
+++ b/.github/workflows/pr-title-checker.yml
@@ -15,7 +15,7 @@ jobs:
   check-pr-title:
     runs-on: ubuntu-slim
     steps:
-      - uses: thehanimo/pr-title-checker@v2.0.0
+      - uses: thehanimo/pr-title-checker@b69bc3a841cf4e3cfef2d822625d8c90a588e9da # v2.0.0
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           pass_on_octokit_error: false
diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
index a415ca6..9802735 100644
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@@ -11,7 +11,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: SciCatProject/docs-template/.github/actions/mkdocs-pages@main
+      - uses: SciCatProject/docs-template/.github/actions/mkdocs-pages@7f67d9c6fdfe01024a326a15abca27a79d16acdc # main
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           push: true