diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 85024ed73b..4ce2878968 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -185,7 +185,7 @@ jobs:
 
       - name: Comment PR with Coverage
         if: matrix.python-version == env.PRIMARY_PYTHON && github.event_name == 'pull_request'
-        uses: py-cov-action/python-coverage-comment-action@63f52f4fbbffada6e8dee8ec432de7e01df9ba79 # v3
+        uses: py-cov-action/python-coverage-comment-action@63f52f4fbbffada6e8dee8ec432de7e01df9ba79 # v3.41
         with:
           GITHUB_TOKEN: ${{ github.token }}
           MINIMUM_GREEN: 85
@@ -264,7 +264,7 @@ jobs:
           gzip "image-artifacts/${{ matrix.image }}.tar"
 
       - name: Upload ${{ matrix.image }} image artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: ${{ matrix.image }}-${{ matrix.platform_tag }}
           path: image-artifacts/${{ matrix.image }}.tar.gz
@@ -292,7 +292,7 @@ jobs:
           persist-credentials: false
 
       - name: Download image artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           pattern: presidio-*-${{ matrix.platform_tag }}
           path: image-artifacts
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 708f273f6c..3087c42c4c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -108,7 +108,7 @@ jobs:
           python -m build
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # release/v1.14.0
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
         with:
           packages-dir: ${{ matrix.package.path }}/dist/
           skip-existing: true