diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
index ef163f0..a37c8dc 100644
--- a/.github/workflows/qa.yml
+++ b/.github/workflows/qa.yml
@@ -67,7 +67,7 @@ jobs:
         if: |
           github.event_name == 'pull_request' &&
           github.event.pull_request.draft == false
-        uses: settlemint/shared-actions/.github/actions/build-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/build-status-labeler@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           workflow_status: "running"
@@ -77,7 +77,7 @@ jobs:
         if: |
           github.event_name == 'pull_request' &&
           github.event.pull_request.draft == false
-        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -90,7 +90,7 @@ jobs:
 
       # Setup dependencies for QA (skip for draft PRs)
       - name: Setup dependencies
-        uses: settlemint/shared-actions/.github/actions/setup-dependencies@main
+        uses: settlemint/shared-actions/.github/actions/setup-dependencies@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           npm_token: ${{ env.NPM_TOKEN }}
@@ -176,7 +176,7 @@ jobs:
           always() &&
           github.event_name == 'pull_request' &&
           steps.qa-tests.conclusion != 'skipped'
-        uses: settlemint/shared-actions/.github/actions/build-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/build-status-labeler@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           workflow_status: ${{ steps.qa-tests.outcome == 'success' && 'success' || 'failure' }}
@@ -189,7 +189,7 @@ jobs:
         if: |
           github.event_name == 'pull_request' &&
           (github.event.action == 'opened' || github.event.action == 'synchronize')
-        uses: settlemint/shared-actions/.github/actions/pr-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-labeler@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -201,7 +201,7 @@ jobs:
       - name: Run secret scanning
         id: secret-scan
         if: github.event_name == 'pull_request'
-        uses: settlemint/shared-actions/.github/actions/secret-scanner@main
+        uses: settlemint/shared-actions/.github/actions/secret-scanner@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         continue-on-error: true
 
       # Label secret scanning results (PR only)
@@ -210,7 +210,7 @@ jobs:
           always() &&
           github.event_name == 'pull_request' &&
           steps.secret-scan.conclusion != 'skipped'
-        uses: settlemint/shared-actions/.github/actions/build-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/build-status-labeler@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           workflow_status:
@@ -223,7 +223,7 @@ jobs:
         if: |
           always() &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review')
-        uses: settlemint/shared-actions/.github/actions/pr-review-check@main
+        uses: settlemint/shared-actions/.github/actions/pr-review-check@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_author: ${{ github.event.pull_request.user.login }}
@@ -237,7 +237,7 @@ jobs:
         if: |
           always() &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review')
-        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           is_draft: ${{ github.event.pull_request.draft }}
@@ -251,7 +251,7 @@ jobs:
           steps.label-final-status.conclusion == 'success' &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review') &&
           github.event.pull_request.draft == false
-        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -267,7 +267,7 @@ jobs:
         if: |
           always() &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review')
-        uses: settlemint/shared-actions/.github/actions/auto-merge@main
+        uses: settlemint/shared-actions/.github/actions/auto-merge@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_author: ${{ github.event.pull_request.user.login }}
@@ -312,14 +312,14 @@ jobs:
           SLACK_CHANNEL_ID: op://platform/slack-bot/SLACK_CHANNEL_ID
 
       - name: Label PR as merged
-        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           is_draft: false
           is_merged: true
 
       - name: Update Slack notification for merged PR
-        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -366,14 +366,14 @@ jobs:
           SLACK_CHANNEL_ID: op://platform/slack-bot/SLACK_CHANNEL_ID
 
       - name: Label PR as abandoned
-        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           is_draft: false
           is_abandoned: true
 
       - name: Update Slack notification for abandoned PR
-        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@9cf097422dec1207e3adb1ebc9bc36e6e35d63cb # main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}