diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index dc4b7afee1..b0414a0d29 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -12,7 +12,7 @@ jobs:
         with:
           fetch-depth: 0   
       - name: Prettify code
-        uses: creyD/prettier_action@v4.6
+        uses: creyD/prettier_action@8c18391fdc98ed0d884c6345f03975edac71b8f0 # v4.6
         with:
           prettier_options: --tab-width 4 --print-width 110 --write **/**/*.java
           prettier_version: "2.8.8"
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 07e88a8363..c52018a6e0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -112,7 +112,7 @@ jobs:
           java-version: '11.0.26+4'
 
       - name: Setup the XCode version to 15.1.0 
-        uses: maxim-lobanov/setup-xcode@v1.6.0
+        uses: maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
         with:
           xcode-version: '15.1.0'
 
diff --git a/.github/workflows/screenshot-test-comment.yml b/.github/workflows/screenshot-test-comment.yml
index 33098af46d..1653a5f49c 100644
--- a/.github/workflows/screenshot-test-comment.yml
+++ b/.github/workflows/screenshot-test-comment.yml
@@ -24,7 +24,7 @@ jobs:
         run: sleep 120
 
       - name: Wait for Screenshot Tests to complete
-        uses: lewagon/wait-on-check-action@v1.4.1
+        uses: lewagon/wait-on-check-action@3603e826ee561ea102b58accb5ea55a1a7482343 # v1.4.1
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           check-name: 'Run Screenshot Tests'
@@ -80,7 +80,7 @@ jobs:
               core.setOutput('failed', 'false');
             }
       - name: Find Existing Comment
-        uses: peter-evans/find-comment@v4.0.0
+        uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0
         id: existingCommentId
         with:
           issue-number: ${{ github.event.pull_request.number }}
@@ -89,7 +89,7 @@ jobs:
 
       - name: Comment on PR if tests fail
         if: steps.check-status.outputs.failed == 'true'
-        uses: peter-evans/create-or-update-comment@v5.0.0
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
           issue-number: ${{ github.event.pull_request.number }}
           body: |