diff --git a/.github/actions/get-polls-version/action.yml b/.github/actions/get-polls-version/action.yml
index 67706892f2..72bbcfc597 100644
--- a/.github/actions/get-polls-version/action.yml
+++ b/.github/actions/get-polls-version/action.yml
@@ -1,6 +1,7 @@
 # SPDX-FileCopyrightText: 2022 Nextcloud contributors
 # SPDX-License-Identifier: AGPL-3.0-or-later
 name: Read polls version from info.xml
+description: 'Read polls app version from info.xml and compare it to tag name'
 inputs:
   skip-check:
     description: Do not check tag against version
diff --git a/.github/actions/setup-composer/action.yml b/.github/actions/setup-composer/action.yml
index db3b01f143..52e377515f 100644
--- a/.github/actions/setup-composer/action.yml
+++ b/.github/actions/setup-composer/action.yml
@@ -1,6 +1,7 @@
 # SPDX-FileCopyrightText: 2022 Nextcloud contributors
 # SPDX-License-Identifier: AGPL-3.0-or-later
 name: Setup composer and PHP
+description: 'Setup PHP environment and install composer packages with caching'
 inputs:
   php-version:
     description: 'PHP version (default: 8.2)'
diff --git a/.github/actions/setup-node/action.yml b/.github/actions/setup-node/action.yml
deleted file mode 100644
index 4d00f297d9..0000000000
--- a/.github/actions/setup-node/action.yml
+++ /dev/null
@@ -1,39 +0,0 @@
-# SPDX-FileCopyrightText: 2022 Nextcloud contributors
-# SPDX-License-Identifier: AGPL-3.0-or-later
-name: Setup node and dependencies
-inputs:
-  node-version:
-    required: false
-    default: 20
-    description: 'Node version to use'
-
-outputs:
-  cache-hit:
-    description: 'Return cache hit'
-    value: ${{ steps.cache-modules.outputs.cache-hit }}
-
-runs:
-  using: 'composite'
-  steps:
-    - name: Use or setup caching npm modules
-      uses: actions/cache@v4
-      id: cache-modules
-      env:
-        cache-name: cache-node-modules
-      with:
-        path: node_modules
-        key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/package-lock.json') }}
-        restore-keys: |
-          ${{ runner.os }}-build-${{ env.cache-name }}-
-          ${{ runner.os }}-build-
-          ${{ runner.os }}-
-
-    - name: Set up node ${{ inputs.node-version }}
-      uses: actions/setup-node@v4
-      with:
-        node-version: ${{ inputs.node-version }}
-
-    - name: Install dependencies
-      if: steps.cache-modules.outputs.cache-hit != 'true'
-      run: npm ci
-      shell: bash
diff --git a/.github/actions/setup-server/action.yml b/.github/actions/setup-server/action.yml
index e654f09067..26f8f0ec56 100644
--- a/.github/actions/setup-server/action.yml
+++ b/.github/actions/setup-server/action.yml
@@ -1,6 +1,7 @@
 # SPDX-FileCopyrightText: 2022 Nextcloud contributors
 # SPDX-License-Identifier: AGPL-3.0-or-later
 name: Checkout and setup server
+description: setup Nextcloud server with app for testing
 inputs:
   server-version:
     required: false
@@ -55,7 +56,7 @@ runs:
   using: 'composite'
   steps:
     - name: Checkout server ${{ inputs.server-version }}
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       with:
         path: ${{ inputs.server-path }}
         repository: nextcloud/server
@@ -70,7 +71,7 @@ runs:
         git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
 
     - name: Checkout ${{ inputs.app-name }}
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       with:
         path: ${{ inputs.server-path }}/apps/${{ inputs.app-name }}
 
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index a9cf87f517..7b105dba2e 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -17,9 +17,9 @@ jobs:
     name: Build app
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Setup node
-        uses: ./.github/actions/setup-node
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: '20'
 
diff --git a/.github/workflows/publish_alpha.yml b/.github/workflows/publish_alpha.yml
index 2472caec32..a223f24b80 100644
--- a/.github/workflows/publish_alpha.yml
+++ b/.github/workflows/publish_alpha.yml
@@ -19,7 +19,7 @@ jobs:
 
     - name: Setup node
       if: success()
-      uses: ./.github/actions/setup-node
+      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
 
     - name: Setup composer and PHP
       if: success()
diff --git a/.github/workflows/publish_beta.yml b/.github/workflows/publish_beta.yml
index 1cd6e34051..be0aa64985 100644
--- a/.github/workflows/publish_beta.yml
+++ b/.github/workflows/publish_beta.yml
@@ -21,7 +21,7 @@ jobs:
 
     - name: Setup node
       if: success()
-      uses: ./.github/actions/setup-node
+      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
 
     - name: Setup composer and PHP
       if: success()
diff --git a/.github/workflows/publish_release.yml b/.github/workflows/publish_release.yml
index 1866c0d15c..c27409138c 100644
--- a/.github/workflows/publish_release.yml
+++ b/.github/workflows/publish_release.yml
@@ -20,7 +20,7 @@ jobs:
 
     - name: Setup node
       if: success()
-      uses: ./.github/actions/setup-node
+      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
 
     - name: Setup composer and PHP
       if: success()