diff --git a/.github/workflows/build-and-package.yaml b/.github/workflows/build-and-package.yaml
index dd2657a..77e2216 100644
--- a/.github/workflows/build-and-package.yaml
+++ b/.github/workflows/build-and-package.yaml
@@ -28,32 +28,32 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
-      - uses: actions-rs/toolchain@v1
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
           toolchain: stable
           target: ${{ env.RUST_TARGET }}
       - name: Rust Cache
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@a95ba195448af2da9b00fb742d14ffaaf3c21f43 # v2
       - name: Install cargo tarpaulin
         run: cargo install cargo-tarpaulin
-      - uses: actions-rs/cargo@v1
+      - uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         with:
           command: build
           use-cross: ${{ env.CARGO_USE_CROSS}}
           args: --release --target=${{ env.RUST_TARGET }}
-      - uses: actions-rs/cargo@v1
+      - uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         name: Generate coverage
         with:
           command: tarpaulin
           args: --out Xml
-      - uses: codecov/codecov-action@v3
+      - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true
         if: always()
       - name: Upload build artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: target
           path: target/**/${{ env.BINARY_NAME }}
@@ -63,14 +63,14 @@ jobs:
     needs: build
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
           working-directory: ./packaging
           bundler-cache: true
       - name: Download build artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
       - name: Set binary as executable
         run: |
           find target -name ${{ env.BINARY_NAME }} -exec chmod +x {} \;
@@ -107,7 +107,7 @@ jobs:
           APP_URL: https://github.com/${{ github.repository }}
           DEB_ARCH: ${{ env.PACKAGE_ARCH }}
       - name: Upload build artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: deb-package
           path: "packaging/*.deb"
@@ -118,7 +118,7 @@ jobs:
     needs: build-package
     steps:
       - name: Download build artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
         with:
           name: deb-package
       - name: Upload to Apt repo