diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4a14c54..836834a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout the source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check formatting
         run: cargo fmt --check
@@ -25,14 +25,14 @@ jobs:
         if: github.event_name == 'pull_request'
 
       - name: Upload tool to artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: tool
           path: target/debug/ci-mirrors
           if-no-files-found: error
 
       - name: Upload TOML files to artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: files-manifests
           path: files/
@@ -52,12 +52,12 @@ jobs:
 
     steps:
       - name: Download the tool
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: tool
 
       - name: Download TOML files
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: files-manifests
           path: files/