diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml
index 1c607c326..77b4c1dce 100644
--- a/.github/workflows/pr-build.yml
+++ b/.github/workflows/pr-build.yml
@@ -54,7 +54,7 @@ jobs:
         python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
     steps:
       - name: Checkout Repo @ SHA - ${{ github.sha }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
 
       - name: Build Wheel and Image Files
         uses: ./.github/actions/artifacts_build
@@ -76,8 +76,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo @ SHA - ${{ github.sha }}
-        uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+        uses: actions/checkout@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+      - uses: actions/setup-python@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
         if: ${{ matrix.language == 'python' }}
         with:
           python-version: '3.x'
@@ -99,7 +99,7 @@ jobs:
         tox-environment: ["spellcheck", "lint"]
     steps:
       - name: Checkout Repo @ SHA - ${{ github.sha }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
 
       - name: Install libsnappy-dev
         if: ${{ matrix.tox-environment == 'lint' }}
@@ -120,19 +120,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo @ SHA - ${{ github.sha }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
 
       - name: Gradle validation
-        uses: gradle/wrapper-validation-action@v1
+        uses: gradle/actions/wrapper-validation@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
 
       - name: Set up Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
         with:
           java-version: 17
           distribution: temurin
 
       - name: Setup Gradle
-        uses: gradle/gradle-build-action@v3
+        uses: gradle/actions/setup-gradle@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
 
       - name: Build with Gradle
         run: cd performance-tests; ./gradlew spotlessCheck