diff --git a/.github/workflows/generate-GitHubEnterprise-3.0.yaml b/.github/workflows/generate-GitHubEnterprise-3.0.yaml
index b441e8cf484..be96dc5989a 100644
--- a/.github/workflows/generate-GitHubEnterprise-3.0.yaml
+++ b/.github/workflows/generate-GitHubEnterprise-3.0.yaml
@@ -10,9 +10,9 @@ jobs:
     outputs:
       version: ${{ steps.supported-versions-matrix.outputs.lowest }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - id: supported-versions-matrix
-        uses: WyriHaximus/github-action-composer-php-versions-in-range@v1
+        uses: WyriHaximus/github-action-composer-php-versions-in-range@ea3d54bf7909d5607c4f32bda9cd8d64e420ec99 # v1
         with:
           workingDirectory: clients/GitHubEnterprise-3.0
   generate-githubenterprise-3_0:
@@ -23,7 +23,7 @@ jobs:
     container:
       image: wyrihaximusnet/php:${{ needs.supported-versions-matrix.outputs.version }}-nts-alpine-slim-dev-root
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - uses: ramsey/composer-install@v2
       - uses: ramsey/composer-install@v2
         with:
@@ -41,12 +41,12 @@ jobs:
           php -r 'file_put_contents(getenv("GITHUB_OUTPUT"), "previous=" . md5(file_get_contents("etc/specs/GitHubEnterprise-3.0/previous.spec.yaml")) . "\n", FILE_APPEND);'
       - name: Look current up spec version
         id: look-current-up-spec-version
-        uses: mikefarah/yq@v4.44.3
+        uses: mikefarah/yq@bbdd97482f2d439126582a59689eb1c855944955 # v4.44.3
         with:
           cmd: yq '.info.version' 'etc/specs/GitHubEnterprise-3.0/current.spec.yaml'
       - name: Look previous up spec version
         id: look-previous-up-spec-version
-        uses: mikefarah/yq@v4.44.3
+        uses: mikefarah/yq@bbdd97482f2d439126582a59689eb1c855944955 # v4.44.3
         with:
           cmd: yq '.info.version' 'etc/specs/GitHubEnterprise-3.0/previous.spec.yaml'
       - name: Generate spec diff
@@ -64,7 +64,7 @@ jobs:
         run: |
           make generate-client GitHubEnterprise-3.0
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7
         with:
           branch: "GitHubEnterprise-3.0/from-${{ steps.look-current-up-spec-version.outputs.result }}-${{ steps.spec-hash.outputs.current }}-from-${{ steps.look-previous-up-spec-version.outputs.result }}-${{ steps.spec-hash.outputs.current }}"
           token: ${{ secrets.SUBSPLIT_GITHUB_TOKEN }}