diff --git a/.github/workflows/deploy-pg-protocol.yml b/.github/workflows/deploy-pg-protocol.yml
index 43b05e8f1..af07e88a0 100644
--- a/.github/workflows/deploy-pg-protocol.yml
+++ b/.github/workflows/deploy-pg-protocol.yml
@@ -17,10 +17,10 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: '18'
           registry-url: 'https://registry.npmjs.org'
@@ -34,4 +34,4 @@ jobs:
       - name: Publish to npm
         run: cd packages/pg-protocol && npm publish
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} 
\ No newline at end of file
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} 
diff --git a/.github/workflows/deploy-pg.yml b/.github/workflows/deploy-pg.yml
index a1e78fa1e..b8f170265 100644
--- a/.github/workflows/deploy-pg.yml
+++ b/.github/workflows/deploy-pg.yml
@@ -17,10 +17,10 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: '18'
           registry-url: 'https://registry.npmjs.org'