diff --git a/.github/workflows/check-links.yml b/.github/workflows/check-links.yml
index 3cb4096e3..2e7638892 100644
--- a/.github/workflows/check-links.yml
+++ b/.github/workflows/check-links.yml
@@ -16,10 +16,10 @@ jobs:
   linkChecker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@7884fcad6b5d53d10323aee724dc68d8b9096a2e
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v1.5.1
+        uses: lycheeverse/lychee-action@4a5af7cd2958a2282cefbd9c10f63bdb89982d76
         with:
           fail: true
         env:
diff --git a/.github/workflows/docs-update-reference.yml b/.github/workflows/docs-update-reference.yml
index 0b437d3b0..d6818b2b1 100644
--- a/.github/workflows/docs-update-reference.yml
+++ b/.github/workflows/docs-update-reference.yml
@@ -2,18 +2,18 @@ name: Create Pull Request for CLI reference update
 on:
   push:
     branches:
-    - action/constellation/update-cli-reference
+      - action/constellation/update-cli-reference
 
 jobs:
   pull-request:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - name: pull-request
-      uses: repo-sync/pull-request@v2
-      with:
-        destination_branch: "main"
-        pr_title: "Update CLI reference"
-        pr_body: |
-          :robot: *This is an automated PR.* :robot:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+      - name: pull-request
+        uses: repo-sync/pull-request@65785d95a5a466e46a9d0708933a3bd51bbf9dde
+        with:
+          destination_branch: "main"
+          pr_title: "Update CLI reference"
+          pr_body: |
+            :robot: *This is an automated PR.* :robot:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/docs-vale.yml b/.github/workflows/docs-vale.yml
index d69a92cce..c69439e32 100644
--- a/.github/workflows/docs-vale.yml
+++ b/.github/workflows/docs-vale.yml
@@ -13,14 +13,13 @@ jobs:
   prose:
     runs-on: ubuntu-latest
     steps:
-    - name: Checkout
-      uses: actions/checkout@master
-
-    - name: Vale
-      uses: errata-ai/vale-action@v1
-      with:
-        files: docs/docs
-      env:
-        # Required, set by GitHub actions automatically:
-        # https://docs.github.com/en/actions/security-guides/automatic-token-authentication#about-the-github_token-secret
-        GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      - name: Checkout
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+      - name: Vale
+        uses: errata-ai/vale-action@c4213d4de3d5f718b8497bd86161531c78992084
+        with:
+          files: docs/docs
+        env:
+          # Required, set by GitHub actions automatically:
+          # https://docs.github.com/en/actions/security-guides/automatic-token-authentication#about-the-github_token-secret
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}