diff --git a/.github/workflows/branch.yml b/.github/workflows/branch.yml
index c42193f..cb80885 100644
--- a/.github/workflows/branch.yml
+++ b/.github/workflows/branch.yml
@@ -38,12 +38,12 @@ jobs:
     runs-on: namespace-profile-fabric-chaincode
     steps:
       - name: Checkout
-        uses: namespacelabs/nscloud-checkout-action@v6
+        uses: namespacelabs/nscloud-checkout-action@v6.0.1
         with:
           submodules: recursive
 
       - name: Setup caches
-        uses: namespacelabs/nscloud-cache-action@v1
+        uses: namespacelabs/nscloud-cache-action@v1.4.2
         with:
           path: |
             cache
@@ -53,10 +53,10 @@ jobs:
             ~/.bun/install/cache
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3
+        uses: sigstore/cosign-installer@v3.10.1
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v3.7.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -64,7 +64,7 @@ jobs:
 
       - name: Docker meta
         id: docker_meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v5.10.0
         with:
           # list of Docker images to use as base name for tags
           images: |
@@ -80,7 +80,7 @@ jobs:
             type=sha
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v6.19.2
         id: build-and-push
         with:
           load: false
diff --git a/.github/workflows/pr-labels.yml b/.github/workflows/pr-labels.yml
index 20bf969..56d46b3 100644
--- a/.github/workflows/pr-labels.yml
+++ b/.github/workflows/pr-labels.yml
@@ -25,4 +25,4 @@ jobs:
   labels:
     runs-on: ubuntu-latest
     steps:
-      - uses: fuxingloh/multi-labeler@v4
+      - uses: fuxingloh/multi-labeler@v4.0.0