diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 1792836..6aa4038 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -8,7 +8,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v4
+      - uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4
         with:
           release-type: terraform-module
           default-branch: main
diff --git a/.github/workflows/terraform-quality.yml b/.github/workflows/terraform-quality.yml
index b31857a..6674350 100644
--- a/.github/workflows/terraform-quality.yml
+++ b/.github/workflows/terraform-quality.yml
@@ -5,4 +5,4 @@ on:
 name: terraform-quality
 jobs:
   terraform-quality:
-    uses: padok-team/github-workflows/.github/workflows/terraform-quality.yml@v1
+    uses: padok-team/github-workflows/.github/workflows/terraform-quality.yml@9f83288283a008c206318c2d45ec2c69f13349c3 # v1
diff --git a/.github/workflows/terratest.yml b/.github/workflows/terratest.yml
index 37083c0..def6d70 100644
--- a/.github/workflows/terratest.yml
+++ b/.github/workflows/terratest.yml
@@ -15,12 +15,12 @@ jobs:
       id-token: "write"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5
         with:
           go-version: "1.22.x"
-      - uses: "google-github-actions/auth@v2"
+      - uses: "google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f" # v2
         with:
           project_id: "library-344516"
           workload_identity_provider: "projects/270410071403/locations/global/workloadIdentityPools/github/providers/padok-gcp-library"