diff --git a/action.yml b/action.yml
index 553533b..71681c3 100644
--- a/action.yml
+++ b/action.yml
@@ -27,25 +27,25 @@ outputs:
 runs:
   using: "composite"
   steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Install dependency
         run: |
           sudo apt-get update
           sudo apt-get install -y pkg-config build-essential libudev-dev
         shell: bash
-      - uses: dtolnay/rust-toolchain@master
+      - uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
         with:
           components: rustfmt, clippy
           toolchain: ${{ inputs.rust-version }}
       - name: Rust Cache
         id: rust-cache
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
         with:
           cache-on-failure: true
           shared-key: ${{ inputs.rust-shared-key }}
           key: solana-${{ inputs.solana-version }}
           workspaces: ${{ inputs.workspace }}
-      - uses: actions/cache@v3
+      - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3
         name: Cache Solana Tool Suite
         id: cache-solana
         with:
@@ -55,7 +55,7 @@ runs:
           key: solana-${{ runner.os }}-v0001-${{ inputs.solana-version }}
       - name: Cache Node Modules
         if: inputs.setup-node != null
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3
         id: cache-node-modules
         with:
           path: |
@@ -63,7 +63,7 @@ runs:
             ~/.yarn/
             ${{ inputs.workspace }}/node_modules
           key: npm-${{ runner.os }}-v0001-${{ hashFiles('**/package-lock.json') }}
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
         with:
           node-version: ${{ inputs.setup-node }}
         if: inputs.setup-node != null