diff --git a/.github/workflows/argocd-tags-ci.yml b/.github/workflows/argocd-tags-ci.yml
index a493be7..b90a847 100644
--- a/.github/workflows/argocd-tags-ci.yml
+++ b/.github/workflows/argocd-tags-ci.yml
@@ -37,10 +37,10 @@ jobs:
 
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
     - name: Checkout Config Repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       with:
         repository: '${{ github.repository_owner }}/${{ inputs.DEPLOYMENT_CONFIGS_REPO }}'
         path: './${{ inputs.DEPLOYMENT_CONFIGS_REPO }}'
@@ -91,7 +91,7 @@ jobs:
 
     - name: Create PR if Desired
       if: ${{ inputs.CREATE_PR }}
-      uses: peter-evans/create-pull-request@v6
+      uses: peter-evans/create-pull-request@70a41aba780001da0a30141984ae2a0c95d8704e # v6
       with:
         token: ${{ secrets.GLUEOPS_DEPLOYMENT_CONFIGS_REPO_TOKEN }}
         path: './${{ inputs.DEPLOYMENT_CONFIGS_REPO }}'
diff --git a/.github/workflows/helm-docs.yml b/.github/workflows/helm-docs.yml
index ae1af52..ca8066e 100644
--- a/.github/workflows/helm-docs.yml
+++ b/.github/workflows/helm-docs.yml
@@ -11,10 +11,10 @@ jobs:
     environment: ${{ inputs.GLUEOPS_ENV }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         
       - name: Install Helm Docs
-        uses: envoy/install-helm-docs@v1.0.0
+        uses: envoy/install-helm-docs@05313083ef2cfaea27c4c3d7cb725242d22ea88b # v1.0.0
         with:
           version: 1.12.0
       
diff --git a/.github/workflows/publish-helm-chart.yml b/.github/workflows/publish-helm-chart.yml
index 757cc2c..bd6fee6 100644
--- a/.github/workflows/publish-helm-chart.yml
+++ b/.github/workflows/publish-helm-chart.yml
@@ -17,10 +17,10 @@ jobs:
     environment: ${{ inputs.GLUEOPS_ENV }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         
       - name: Install Helm Docs
-        uses: envoy/install-helm-docs@v1.0.0
+        uses: envoy/install-helm-docs@05313083ef2cfaea27c4c3d7cb725242d22ea88b # v1.0.0
         with:
           version: 1.12.0
       
@@ -54,14 +54,14 @@ jobs:
           fi
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
           aws-region: us-west-2
 
       - name: Set up Helm
-        uses: mamezou-tech/setup-helmfile@v2.0.0
+        uses: mamezou-tech/setup-helmfile@03233e1cd9b19b2ba320e431f7bcc0618db4248d # v2.0.0
         with:
           helm-version: "v3.14.3"
 
diff --git a/.github/workflows/publish-image-to-ghcr.yml b/.github/workflows/publish-image-to-ghcr.yml
index 647c6f2..55ab09e 100644
--- a/.github/workflows/publish-image-to-ghcr.yml
+++ b/.github/workflows/publish-image-to-ghcr.yml
@@ -8,29 +8,29 @@ jobs:
     name: Push Docker image to Docker Registry
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5
         with:
           go-version: '1.21.7'
       - run: go version
 
       - name: Check our repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@2b51285047da1547ffb1b2203d8be4c0af6b1f20 # v3
         
       - name: Log in to Docker Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       
       - name: Generate Variables for Tags
-        uses: rlespinasse/github-slug-action@v4
+        uses: rlespinasse/github-slug-action@102b1a064a9b145e56556e22b18b19c624538d94 # v4
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5
         with:
           context: .
           push: true
diff --git a/.github/workflows/publish-metacontroller-helm-chart.yml b/.github/workflows/publish-metacontroller-helm-chart.yml
index 94cb5e5..2d8cb98 100644
--- a/.github/workflows/publish-metacontroller-helm-chart.yml
+++ b/.github/workflows/publish-metacontroller-helm-chart.yml
@@ -23,19 +23,19 @@ jobs:
     runs-on: ubuntu-22.04
     environment: ${{ inputs.GLUEOPS_ENV }}
     steps:
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5
         with:
           go-version: '1.21.7'
       - run: go version
 
       - name: Check out repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: clone metacontroller/metacontroller
         run: git clone --depth 1 --branch ${{ inputs.VERSION_TAG }} https://github.com/metacontroller/metacontroller.git 
 
       - name: Install Helm Docs
-        uses: envoy/install-helm-docs@v1.0.0
+        uses: envoy/install-helm-docs@05313083ef2cfaea27c4c3d7cb725242d22ea88b # v1.0.0
         with:
           version: 1.12.0
 
@@ -60,7 +60,7 @@ jobs:
           helm-docs -t README.md.gotmpl
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}