diff --git a/.github/workflows/helm-chart-publish.yaml b/.github/workflows/helm-chart-publish.yaml
index fbc838d3..92c33376 100644
--- a/.github/workflows/helm-chart-publish.yaml
+++ b/.github/workflows/helm-chart-publish.yaml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
@@ -55,4 +55,4 @@ jobs:
             cosign sign -y "ghcr.io/${GITHUB_REPOSITORY}/${chart_name}@${digest}"
           done
         env:
-          COSIGN_EXPERIMENTAL: 1
\ No newline at end of file
+          COSIGN_EXPERIMENTAL: 1
diff --git a/.github/workflows/helm-chart-test.yaml b/.github/workflows/helm-chart-test.yaml
index f5dab01b..515ae66b 100644
--- a/.github/workflows/helm-chart-test.yaml
+++ b/.github/workflows/helm-chart-test.yaml
@@ -38,7 +38,7 @@ jobs:
           python-version: '3.x'
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@v2.7.0
+        uses: helm/chart-testing-action@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b # v2.7.0
      
       - name: Run chart-testing (lint)
         run: ct lint --config ct.yaml
@@ -47,4 +47,4 @@ jobs:
         uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # pin@v1.12.0
 
       - name: Run chart-testing (install)
-        run: ct install --config ct.yaml
\ No newline at end of file
+        run: ct install --config ct.yaml