diff --git a/.github/actions/nf-test-action/action.yml b/.github/actions/nf-test-action/action.yml
index 4dd6df48919e..e1e1f4bc57d1 100644
--- a/.github/actions/nf-test-action/action.yml
+++ b/.github/actions/nf-test-action/action.yml
@@ -11,9 +11,9 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-    - uses: actions/setup-java@v4
+    - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4
       with:
         distribution: "temurin"
         java-version: "17"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 0ff73656067e..736b2c9eae9d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -88,7 +88,7 @@ jobs:
         with:
           fetch-depth: 2 # To retrieve the preceding commit.
 
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
         id: filter
         with:
           filters: "tests/config/pytest_modules.yml"