diff --git a/.github/workflows/ssh-agent-build.yaml b/.github/workflows/ssh-agent-build.yaml
index 089ad142..308c15a7 100644
--- a/.github/workflows/ssh-agent-build.yaml
+++ b/.github/workflows/ssh-agent-build.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Set up Node.js
         uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4
@@ -30,7 +30,7 @@ jobs:
           popd
 
       - name: Run linters
-        uses: wearerequired/lint-action@v2
+        uses: wearerequired/lint-action@548d8a7c4b04d3553d32ed5b6e91eb171e10e7bb # v2
         with:
           continue_on_error: false
           eslint_dir: ssh-agent/
diff --git a/kyverno-cli/Dockerfile b/kyverno-cli/Dockerfile
index 5c41cb71..26e3fc3a 100644
--- a/kyverno-cli/Dockerfile
+++ b/kyverno-cli/Dockerfile
@@ -1,2 +1,2 @@
 # renovate: datasource=github-releases depName=redhat-cop/github-actions
-FROM ghcr.io/redhat-cop/github-actions/kyverno-cli:v4.0
+FROM ghcr.io/redhat-cop/github-actions/kyverno-cli:v4.0@sha256:343c64052374dbc66bd3af0e0fc376d671a212060f4ad0386bf91cc798be7b81
diff --git a/redhat-csp-download/Dockerfile b/redhat-csp-download/Dockerfile
index e1e7c62c..e636ed14 100644
--- a/redhat-csp-download/Dockerfile
+++ b/redhat-csp-download/Dockerfile
@@ -1,2 +1,2 @@
 # renovate: datasource=github-releases depName=redhat-cop/github-actions
-FROM ghcr.io/redhat-cop/github-actions/redhat-csp-download:v4.0
+FROM ghcr.io/redhat-cop/github-actions/redhat-csp-download:v4.0@sha256:c2729b245aec118228318580396900b1aa616210bec22450d8786dbce0a65f2e
diff --git a/ssh-agent/package.json b/ssh-agent/package.json
index c867d89e..af227257 100644
--- a/ssh-agent/package.json
+++ b/ssh-agent/package.json
@@ -14,9 +14,9 @@
     "@actions/core": "^1.10.0"
   },
   "devDependencies": {
-    "eslint": "^8.35.0",
-    "eslint-config-prettier": "^8.7.0",
-    "ncc": "^0.3.6",
-    "prettier": "^2.8.4"
+    "eslint": "8.54.0",
+    "eslint-config-prettier": "8.10.0",
+    "ncc": "0.3.6",
+    "prettier": "2.8.8"
   }
 }