diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 13a27556..fc51b57c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -233,7 +233,7 @@ jobs:
 
     - name: Publish to PyPI - on tag
       if: startsWith(github.ref, 'refs/tags/')
-      uses: pypa/gh-action-pypi-publish@v1.4.2
+      uses: pypa/gh-action-pypi-publish@37f50c210e3d2f9450da2cd423303d6a14a6e29f
       with:
         password: ${{ secrets.PYPI_TOKEN }}
         verbose: true
@@ -258,6 +258,6 @@ jobs:
       - pypi-publish
     steps:
       - name: Require all successes
-        uses: re-actors/alls-green@release/v1
+        uses: re-actors/alls-green@3a2de129f0713010a71314c74e33c0e3ef90e696
         with:
           jobs: ${{ toJSON(needs) }}