diff --git a/.github/workflows/build-and-deployment-workflow.yml b/.github/workflows/build-and-deployment-workflow.yml
index 67da102..e77bccc 100644
--- a/.github/workflows/build-and-deployment-workflow.yml
+++ b/.github/workflows/build-and-deployment-workflow.yml
@@ -82,10 +82,10 @@ jobs:
       stages-json: ${{ steps.build-and-push-image.outputs.stages-json }}
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: "Build image and push it to SetOps image registry"
         id: build-and-push-image
-        uses: setopsco/github-actions/build-and-push-image@v4
+        uses: setopsco/github-actions/build-and-push-image@031473a902eccf65da0be619e2f0e91537a636f2 # v4
         with:
           setops-api-domain: ${{ inputs.setops-api-domain }}
           setops-organization: ${{ inputs.setops-organization }}
@@ -113,10 +113,10 @@ jobs:
     needs: build
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: "Deploy apps on SetOps"
         id: deploy
-        uses: setopsco/github-actions/deployment@v4
+        uses: setopsco/github-actions/deployment@031473a902eccf65da0be619e2f0e91537a636f2 # v4
         with:
           setops-api-domain: ${{ inputs.setops-api-domain }}
           setops-organization: ${{ inputs.setops-organization }}
diff --git a/.github/workflows/test-build-and-deployment-action.yml b/.github/workflows/test-build-and-deployment-action.yml
index 478a410..7b667fb 100644
--- a/.github/workflows/test-build-and-deployment-action.yml
+++ b/.github/workflows/test-build-and-deployment-action.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup SetOps
         uses: ./setup
@@ -46,7 +46,7 @@ jobs:
       stages-json: ${{ steps.build-and-push-image.outputs.stages-json }}
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: "Build image and push it to SetOps image registry"
         id: build-and-push-image
         uses: ./build-and-push-image
@@ -74,7 +74,7 @@ jobs:
     needs: build
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: "Deploy apps on SetOps"
         id: deploy
         uses: ./deployment
diff --git a/.github/workflows/test-setup-action-build.yml b/.github/workflows/test-setup-action-build.yml
index 1c94fc1..04dcf55 100644
--- a/.github/workflows/test-setup-action-build.yml
+++ b/.github/workflows/test-setup-action-build.yml
@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup Node.js 20.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: "20.x"
 
diff --git a/.github/workflows/test-setup-action.yml b/.github/workflows/test-setup-action.yml
index 1512d9f..ed21c68 100644
--- a/.github/workflows/test-setup-action.yml
+++ b/.github/workflows/test-setup-action.yml
@@ -14,7 +14,7 @@ jobs:
         setops_versions: ["0.10.3", latest, next]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup SetOps - ${{ matrix['setops_versions'] }}
         uses: ./setup
@@ -40,7 +40,7 @@ jobs:
         setops_versions: [~0.9, 0.9.x, <0.10.0]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup SetOps - ${{ matrix['setops_versions'] }}
         uses: ./setup
@@ -58,7 +58,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup SetOps
         uses: ./setup
diff --git a/README.md b/README.md
index da9b4fb..28bb8e1 100644
--- a/README.md
+++ b/README.md
@@ -29,7 +29,7 @@ jobs:
           fi
 
   setops-deployment:
-    uses: setopsco/github-actions/.github/workflows/build-and-deployment-workflow.yml@v3
+    uses: setopsco/github-actions/.github/workflows/build-and-deployment-workflow.yml@031473a902eccf65da0be619e2f0e91537a636f2 # v4
     with:
       setops-organization: <yourorganization>
       setops-stages: ${{ needs.setops-stages.outputs.stages }}
@@ -84,7 +84,7 @@ The default configuration installs the latest version of SetOps CLI and a wrappe
 
 ```yaml
 steps:
-- uses: setopsco/github-actions/setup@v4
+- uses: setopsco/github-actions/setup@031473a902eccf65da0be619e2f0e91537a636f2 # v4
   with:
     github_token: ${{ secrets.GITHUB_TOKEN }}
 ```
@@ -93,7 +93,7 @@ A specific version of SetOps CLI can be installed:
 
 ```yaml
 steps:
-- uses: setopsco/github-actions/setup@v4
+- uses: setopsco/github-actions/setup@031473a902eccf65da0be619e2f0e91537a636f2 # v4
   with:
     setops_version: 1.0.0
     github_token: ${{ secrets.GITHUB_TOKEN }}
@@ -103,7 +103,7 @@ Credentials for SetOps can be configured:
 
 ```yaml
 steps:
-- uses: setopsco/github-actions/setup@v4
+- uses: setopsco/github-actions/setup@031473a902eccf65da0be619e2f0e91537a636f2 # v4
   with:
     setops_organization: <yourorganization>
     setops_username: my-ci-user@setops.co
@@ -130,10 +130,10 @@ jobs:
       image-tag: ${{ steps.build_and_push_image.outputs.image-tag }}
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: "Build image and push it to SetOps image registry"
         id: build_and_push_image
-        uses: setopsco/github-actions/build-and-push-image@v4
+        uses: setopsco/github-actions/build-and-push-image@031473a902eccf65da0be619e2f0e91537a636f2 # v4
         with:
           setops-organization: <yourorganization>
           setops-username: ${{ secrets.SETOPS_USER }}
@@ -167,10 +167,10 @@ deploy:
   needs: build
   steps:
     - name: "Checkout repository"
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - name: "Deploy project on SetOps"
       id: deploy
-      uses: setopsco/github-actions/deployment@v4
+      uses: setopsco/github-actions/deployment@031473a902eccf65da0be619e2f0e91537a636f2 # v4
       with:
         setops-organization: <yourorganization>
         setops-username: ${{ secrets.SETOPS_USER }}
diff --git a/build-and-push-image/action.yml b/build-and-push-image/action.yml
index bf6d4c2..5910925 100644
--- a/build-and-push-image/action.yml
+++ b/build-and-push-image/action.yml
@@ -83,16 +83,16 @@ runs:
         echo "date=$(/bin/date -u "+%Y%m%d")" >> $GITHUB_OUTPUT
       shell: bash
     - name: "Set up Docker Buildx"
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
     - name: Cache Docker layers
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
       with:
         path: /tmp/.buildx-cache
         key: ${{ runner.os }}-buildx-${{ steps.get_date.outputs.date }}-${{ inputs.build-cache-key-prefix }}-${{ github.sha }}
         restore-keys: |
           ${{ runner.os }}-buildx-${{ steps.get_date.outputs.date }}-${{ inputs.build-cache-key-prefix }}-
     - name: Install SetOps CLI
-      uses: setopsco/github-actions/setup@v4
+      uses: setopsco/github-actions/setup@031473a902eccf65da0be619e2f0e91537a636f2 # v4
       with:
         setops_api_url: https://${{ inputs.setops-api-domain }}
         setops_organization: ${{ inputs.setops-organization }}
@@ -102,7 +102,7 @@ runs:
         github_token: ${{ inputs.github-token }}
     - name: Build and push app
       id: build_app
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
       with:
         context: ${{ inputs.build-context }}
         push: true
diff --git a/deployment/action.yml b/deployment/action.yml
index e886182..6fe5372 100644
--- a/deployment/action.yml
+++ b/deployment/action.yml
@@ -58,7 +58,7 @@ runs:
   using: composite
   steps:
     - name: Install Setops
-      uses: setopsco/github-actions/setup@v4
+      uses: setopsco/github-actions/setup@031473a902eccf65da0be619e2f0e91537a636f2 # v4
       with:
         setops_api_url: https://${{ inputs.setops-api-domain }}
         setops_organization: ${{ inputs.setops-organization }}