diff --git a/.github/actions/release-helm-oci/action.yml b/.github/actions/release-helm-oci/action.yml
index 7444cc224d..d20691ad0f 100644
--- a/.github/actions/release-helm-oci/action.yml
+++ b/.github/actions/release-helm-oci/action.yml
@@ -34,7 +34,7 @@ runs:
   using: composite
   steps:
     - name: Log in to GHCR
-      uses: docker/login-action@v3
+      uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
diff --git a/.github/actions/setup-buildx/action.yml b/.github/actions/setup-buildx/action.yml
index 3e1d545216..ace7c60f5e 100644
--- a/.github/actions/setup-buildx/action.yml
+++ b/.github/actions/setup-buildx/action.yml
@@ -23,7 +23,7 @@ runs:
   using: composite
   steps:
     - name: Set up Docker Buildx (local)
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
       with:
         name: ${{ inputs.name }}
         driver: docker-container