diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9394b93..da6f142 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,9 +12,9 @@ jobs:
       - name: Check out repo
         uses: actions/checkout@v5
       - name: Set up Python
-        uses: ni/python-actions/setup-python@v0.1.0
+        uses: ni/python-actions/setup-python@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
       - name: Set up Poetry
-        uses: ni/python-actions/setup-poetry@v0.1.0
+        uses: ni/python-actions/setup-poetry@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
       - name: Check Poetry version
         run: poetry --version
       - name: Install dependencies
diff --git a/.github/workflows/report_test_results.yml b/.github/workflows/report_test_results.yml
index 7c15975..b91e3f8 100644
--- a/.github/workflows/report_test_results.yml
+++ b/.github/workflows/report_test_results.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Check out repo
         uses: actions/checkout@v5
       - name: Download test results
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           path: test_results
           pattern: test_results_*
@@ -26,6 +26,6 @@ jobs:
       - name: List downloaded files
         run: ls -lR
       - name: Publish test results
-        uses: EnricoMi/publish-unit-test-result-action@v2
+        uses: EnricoMi/publish-unit-test-result-action@34d7c956a59aed1bfebf31df77b8de55db9bbaaf # v2.21.0
         with:
           files: "test_results/*.xml"
diff --git a/.github/workflows/run_acceptance_tests.yml b/.github/workflows/run_acceptance_tests.yml
index 9cb79b2..63aab01 100644
--- a/.github/workflows/run_acceptance_tests.yml
+++ b/.github/workflows/run_acceptance_tests.yml
@@ -27,7 +27,7 @@ jobs:
       - name: Run acceptance tests for PXIe-6674T
         run: poetry run pytest --resource_name="6674T" --junitxml=test_results/acceptance-${{ matrix.configuration }}.xml
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: test_results_acceptance_${{ matrix.configuration }}
           path: test_results/*.xml
diff --git a/.github/workflows/run_unit_tests.yml b/.github/workflows/run_unit_tests.yml
index 139c69e..3fe9366 100644
--- a/.github/workflows/run_unit_tests.yml
+++ b/.github/workflows/run_unit_tests.yml
@@ -19,11 +19,11 @@ jobs:
       - name: Check out repo
         uses: actions/checkout@v5
       - name: Set up Python ${{ matrix.python-version }}
-        uses: ni/python-actions/setup-python@v0.1.0
+        uses: ni/python-actions/setup-python@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Set up Poetry
-        uses: ni/python-actions/setup-poetry@v0.1.0
+        uses: ni/python-actions/setup-poetry@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
       - name: Check Poetry version
         run: poetry --version
       - name: Install main package dependencies
@@ -35,7 +35,7 @@ jobs:
       - name: Run unit tests
         run: poetry run pytest -v --junitxml=test_results/unit-${{ matrix.os }}-py${{ matrix.python-version }}.xml
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: test_results_unit_${{ matrix.os }}_py${{ matrix.python-version }}
           path: test_results/*.xml
diff --git a/.github/workflows/sync_github_issues_to_azdo.yml b/.github/workflows/sync_github_issues_to_azdo.yml
index 63f78e8..4a3a20f 100644
--- a/.github/workflows/sync_github_issues_to_azdo.yml
+++ b/.github/workflows/sync_github_issues_to_azdo.yml
@@ -23,7 +23,7 @@ jobs:
           else
             echo "work_item_type=Bug" >> $GITHUB_OUTPUT
           fi
-      - uses: danhellem/github-actions-issue-to-work-item@v2.5
+      - uses: danhellem/github-actions-issue-to-work-item@8d0ead9b49a65aa66dac6949b1ff149d7ef8b4de # v2.5
         env:
           ado_token: "${{ secrets.AZDO_WORK_ITEM_TOKEN }}"
           github_token: "${{ secrets.GH_REPO_TOKEN }}"