diff --git a/.github/workflows/build-site.yml b/.github/workflows/build-site.yml
index d23c695b..19103d7b 100644
--- a/.github/workflows/build-site.yml
+++ b/.github/workflows/build-site.yml
@@ -34,7 +34,7 @@ jobs:
 
       - name: Check links with lychee
         id: lychee
-        uses: lycheeverse/lychee-action@v2.5.0
+        uses: lycheeverse/lychee-action@01a5c94d8e012550040658854b90a7a7301e75ca #v2.6.0
         with:
           fail: true
           args: --verbose --no-progress _site/*.html
diff --git a/.github/workflows/deploy-gh-pages.yml b/.github/workflows/deploy-gh-pages.yml
index e9d91a46..b5de1226 100644
--- a/.github/workflows/deploy-gh-pages.yml
+++ b/.github/workflows/deploy-gh-pages.yml
@@ -48,7 +48,7 @@ jobs:
           JEKYLL_ENV: production
       - name: Upload artifact
         # Automatically uploads an artifact from the './_site' directory by default
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b #v4
 
   # Deployment job
   deploy:
diff --git a/.github/workflows/linkcheck.yml b/.github/workflows/linkcheck.yml
index db17f031..3cd7e4b0 100644
--- a/.github/workflows/linkcheck.yml
+++ b/.github/workflows/linkcheck.yml
@@ -30,7 +30,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@v2.5.0
+        uses: lycheeverse/lychee-action@01a5c94d8e012550040658854b90a7a7301e75ca #v2.6.0
         with:
           args: --verbose --no-progress _site/*.html
         env: