diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
index 105e8d79d..4eb1bdf12 100644
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -21,7 +21,7 @@ jobs:
     name: Conventional Commits Validation
     runs-on: ubuntu-latest
     steps:
-      - uses: dev-build-deploy/commit-me@v1.5.0
+      - uses: dev-build-deploy/commit-me@27d14296ec218488c543616d9128d7e75ab7463a # v1.5.3
         env:
           FORCE_COLOR: 3
         with:
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index cb66fe302..4e619fa63 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Install Ruby 3.4
         uses: ruby/setup-ruby@v1.267.0
         with:
-          ruby-version: 3.4
+          ruby-version: 3.4.7
       - name: Generate Gemfile.lock
         run: |
           echo "Finding all Gemfiles in the project..."
diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index c56b5e677..637df0ddf 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -24,7 +24,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
+      - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif