diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 8cc510d..0072acd 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -8,7 +8,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v3
+      - uses: google-github-actions/release-please-action@db8f2c60ee802b3748b512940dde88eabd7b7e01 # v3
         with:
           release-type: terraform-module
           default-branch: main
diff --git a/.github/workflows/terraform-quality.yml b/.github/workflows/terraform-quality.yml
index b31857a..6674350 100644
--- a/.github/workflows/terraform-quality.yml
+++ b/.github/workflows/terraform-quality.yml
@@ -5,4 +5,4 @@ on:
 name: terraform-quality
 jobs:
   terraform-quality:
-    uses: padok-team/github-workflows/.github/workflows/terraform-quality.yml@v1
+    uses: padok-team/github-workflows/.github/workflows/terraform-quality.yml@9f83288283a008c206318c2d45ec2c69f13349c3 # v1
diff --git a/.github/workflows/terratest.yml b/.github/workflows/terratest.yml
index ea73f88..5e51203 100644
--- a/.github/workflows/terratest.yml
+++ b/.github/workflows/terratest.yml
@@ -12,12 +12,12 @@ jobs:
       id-token: "write"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
         with:
           go-version: "1.22.x"
-      - uses: "google-github-actions/auth@v2"
+      - uses: "google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d" # v2
         with:
           project_id: "library-344516"
           workload_identity_provider: "projects/270410071403/locations/global/workloadIdentityPools/github/providers/padok-gcp-library"