diff --git a/.github/workflows/bump_version.yaml b/.github/workflows/bump_version.yaml
index e80d8a36c6..2505612b0b 100644
--- a/.github/workflows/bump_version.yaml
+++ b/.github/workflows/bump_version.yaml
@@ -13,6 +13,6 @@ jobs:
       contents: write
       pull-requests: write
 
-    uses: GlueOps/github-workflows/.github/workflows/bump-version-cut-release.yaml@main
+    uses: GlueOps/github-workflows/.github/workflows/bump-version-cut-release.yaml@536dd7ba5e206a5a9ba4c01b0b5fc15aa5f5690a # main
     secrets:
       token: ${{ secrets.CREATE_REPO_RELEASE }}
\ No newline at end of file
diff --git a/.github/workflows/packer-qemu.yml b/.github/workflows/packer-qemu.yml
index 8d9313e08f..77f0e9ed9b 100644
--- a/.github/workflows/packer-qemu.yml
+++ b/.github/workflows/packer-qemu.yml
@@ -68,7 +68,7 @@ jobs:
 
 
       - id: install-aws-cli
-        uses: unfor19/install-aws-cli-action@v1
+        uses: unfor19/install-aws-cli-action@f5b46b7f32cf5e7ebd652656c5036bf83dd1e60c # v1
         with:
           version: 2
           verbose: false