diff --git a/.github/workflows/reusable-tox.yml b/.github/workflows/reusable-tox.yml
index 70cdfb7de..53b6fcbe3 100644
--- a/.github/workflows/reusable-tox.yml
+++ b/.github/workflows/reusable-tox.yml
@@ -317,7 +317,8 @@ jobs:
       if: >-
         !cancelled()
         && steps.tox-run.outputs.test-result-files != ''
-      uses: test-summary/action@v2.3
+      # yamllint disable-line rule:line-length
+      uses: test-summary/action@31493c76ec9e7aa675f1585d3ed6f1da69269a86  # v2.4
       with:
         paths: >-
           ${{ steps.tox-run.outputs.test-result-files }}
@@ -334,7 +335,8 @@ jobs:
         && steps.tox-run.outputs.cov-report-files != ''
         && steps.tox-run.outputs.test-result-files == ''
         && steps.tox-run.outputs.codecov-flags != 'MyPy'
-      uses: irongut/CodeCoverageSummary@v1.3.0
+      # yamllint disable-line rule:line-length
+      uses: irongut/CodeCoverageSummary@51cc3a756ddcd398d447c044c02cb6aa83fdae95  # v1.3.0
       with:
         badge: true
         filename: >-