diff --git a/.github/workflows/issueSnapshot.yml b/.github/workflows/issueSnapshot.yml
index ae14c533..b57d38af 100644
--- a/.github/workflows/issueSnapshot.yml
+++ b/.github/workflows/issueSnapshot.yml
@@ -19,11 +19,11 @@ jobs:
           path: ./*.json
           retention-days: 1
       - name: Log in to Azure
-        uses: azure/login@v1
+        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d  # v1
         with:
           creds: ${{ secrets.AZURE_CREDS }}
       - name: Upload to Azure
-        uses: azure/CLI@v1
+        uses: azure/CLI@4db43908b9df2e7ac93c8275a8f9a448c59338dd  # v1
         with:
           inlineScript: |
             az storage blob upload-batch --account-name ${{ vars.AZURE_STORAGE_ACCOUNT_NAME }} --auth-mode login -d ${{ vars.AZURE_STORAGE_CONTAINER_NAME }} -s .
diff --git a/.github/workflows/triage-agent.yml b/.github/workflows/triage-agent.yml
index 57d97837..58cb3b22 100644
--- a/.github/workflows/triage-agent.yml
+++ b/.github/workflows/triage-agent.yml
@@ -25,7 +25,7 @@ jobs:
 
       - name: Get issue data
         id: get_issue
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410  # v6
         with:
           script: |
             const eventName = context.eventName;
diff --git a/.github/workflows/triage-all-open-issues.yml b/.github/workflows/triage-all-open-issues.yml
index 092f4ef7..ae3d868e 100644
--- a/.github/workflows/triage-all-open-issues.yml
+++ b/.github/workflows/triage-all-open-issues.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: Get all open issues
         id: get_issues
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410  # v6
         with:
           script: |
             // Use Search API to filter issues at API level
@@ -85,7 +85,7 @@ jobs:
       
       - name: Trigger triage workflow for issue
         if: inputs.dry_run != true
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410  # v6
         with:
           script: |
             const issueNumber = '${{ matrix.issue_number }}';