diff --git a/.github/workflows/fields.yaml b/.github/workflows/fields.yaml
index b6c7e105..176765ff 100644
--- a/.github/workflows/fields.yaml
+++ b/.github/workflows/fields.yaml
@@ -10,7 +10,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
       - name: build fields
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 52ce66db..e92f748f 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -8,7 +8,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
 
@@ -25,7 +25,7 @@ jobs:
         run: echo "::set-output name=tag::${GITHUB_REF##*/}"
 
       - name: Deploy JSON Schema for version ${{ env.GITHUB_REF }}
-        uses: peaceiris/actions-gh-pages@v3.9.2
+        uses: peaceiris/actions-gh-pages@bd8c6b06eba6b3d25d72b7a1767993c0aeee42e7 # v3.9.2
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: extensions
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 6c4ed00d..4bd139ca 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -2,8 +2,9 @@ name: Test
 on:
   push:
 
+
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: linz/action-typescript@v3
+      - uses: linz/action-typescript@dee99184c4305aea6c380a52db9b2d7abaaa3e78 # v3