diff --git a/.github/workflows/LRS.yml b/.github/workflows/LRS.yml
index b6e2b75..8044f51 100644
--- a/.github/workflows/LRS.yml
+++ b/.github/workflows/LRS.yml
@@ -17,30 +17,30 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout LRS repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: statsig-io/long-running-sdk
           ref: main
           token: ${{ secrets.ROIM }}
       - name: Checkout SDK repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: statsig-io/private-python-sdk
           ref: main
           token: ${{ secrets.ROIM }}
           path: ./python/private-python-sdk
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # v1
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@f211e3e9ded2d9377c8cadc4489a4e38014bc4c9 # v1
       - name: Login to DockerHub
-        uses: docker/login-action@v1
+        uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1
         with:
           username: statsig
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Build and push
         id: docker_build
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
         with:
           context: .
           file: python/Dockerfile
diff --git a/.github/workflows/kong.yml b/.github/workflows/kong.yml
index f2023ba..422aee4 100644
--- a/.github/workflows/kong.yml
+++ b/.github/workflows/kong.yml
@@ -22,7 +22,7 @@ jobs:
         run: |
           git clone https://oauth2:$repo_pat@github.com/statsig-io/kong.git .
 
-      - uses: actions/setup-node@v1
+      - uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e # v1
         with:
           node-version: "16.x"
 
@@ -44,7 +44,7 @@ jobs:
 
       - name: Upload base benchmark score
         if: github.ref == 'refs/heads/main'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: python-perf
           path: /tmp/perf/python_perf_score.txt
diff --git a/.github/workflows/release-bot.yml b/.github/workflows/release-bot.yml
index 5d8c6a5..49e3645 100644
--- a/.github/workflows/release-bot.yml
+++ b/.github/workflows/release-bot.yml
@@ -12,7 +12,7 @@ jobs:
     if: startsWith(github.head_ref, 'releases/') || github.event_name == 'release'
     runs-on: ubuntu-latest
     steps:
-      - uses: statsig-io/statsig-publish-sdk-action@main
+      - uses: statsig-io/statsig-publish-sdk-action@c0740fb8a2d4813522cc09bb8c4e826bb78ce6ab # main
         with:
           kong-private-key: ${{ secrets.KONG_GH_APP_PRIVATE_KEY }}
           pypi-token: ${{ secrets.PYPI_PUBLISH_TOKEN }}
diff --git a/.github/workflows/scheduler.yml b/.github/workflows/scheduler.yml
index 142fa3e..22cdf26 100644
--- a/.github/workflows/scheduler.yml
+++ b/.github/workflows/scheduler.yml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Trigger Scheduled Test Runs
         if: github.event.repository.private
-        uses: actions/github-script@v6
+        uses: actions/github-script@00f12e3e20659f42342b1c0226afda7f7c042325 # v6
         with:
           script: |
             const args = {
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e64b544..5bef45c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,8 +12,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+      - uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
         with:
           python-version: "3.9"