diff --git a/.github/workflows/cibuild.yml b/.github/workflows/cibuild.yml
index 94e0db0..6dc7286 100644
--- a/.github/workflows/cibuild.yml
+++ b/.github/workflows/cibuild.yml
@@ -59,14 +59,14 @@ jobs:
           services.gradle.org:443
 
     - name: Git Checkout
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Setup Java ${{ matrix.java }}
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582
+      uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0
       with:
         cache-read-only: ${{ github.ref != 'refs/heads/main' }}
     - name: Build
diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
index 25aec48..8ce0639 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -42,11 +42,11 @@ jobs:
           services.gradle.org:443
 
     - name: Git Checkout
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Setup Java ${{ matrix.java }}
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}
     - name: Generate and submit dependency graph
-      uses: gradle/actions/dependency-submission@af1da67850ed9a4cedd57bfd976089dd991e2582
+      uses: gradle/actions/dependency-submission@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index a3cfaec..6d9162c 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -29,7 +29,7 @@ jobs:
           api.github.com:443
 
     - name: Stale Action
-      uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e
+      uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0
       with:
         days-before-stale: 365
         days-before-close: 21
diff --git a/.github/workflows/wrapper.yml b/.github/workflows/wrapper.yml
index e141a8d..fef69e4 100644
--- a/.github/workflows/wrapper.yml
+++ b/.github/workflows/wrapper.yml
@@ -40,6 +40,6 @@ jobs:
           services.gradle.org:443
 
     - name: Git Checkout
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Gradle Wrapper Validation
-      uses: gradle/actions/wrapper-validation@af1da67850ed9a4cedd57bfd976089dd991e2582
+      uses: gradle/actions/wrapper-validation@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0