diff --git a/.github/workflows/monitor_waf_deploy.yml b/.github/workflows/monitor_waf_deploy.yml
index 0af15932..bf3f8dcd 100644
--- a/.github/workflows/monitor_waf_deploy.yml
+++ b/.github/workflows/monitor_waf_deploy.yml
@@ -28,7 +28,7 @@ jobs:
     timeout-minutes: 5
     steps: # ref:https://docs.aws.amazon.com/ja_jp/serverless-application-model/latest/developerguide/deploying-using-github.html
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
       - uses: aws-actions/setup-sam@v2
       - uses: aws-actions/configure-aws-credentials@v4
         with:
@@ -41,7 +41,7 @@ jobs:
 
         name: sam update
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
       - uses: aws-actions/setup-sam@v2
       - uses: aws-actions/configure-aws-credentials@v4
         with:
diff --git a/.github/workflows/s3_conversion.yaml b/.github/workflows/s3_conversion.yaml
index d062ebd8..b4fa4f7c 100644
--- a/.github/workflows/s3_conversion.yaml
+++ b/.github/workflows/s3_conversion.yaml
@@ -30,7 +30,7 @@ jobs:
     steps: # ref:https://docs.aws.amazon.com/ja_jp/serverless-application-model/latest/developerguide/deploying-using-github.html
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
 
       - uses: actions/cache@v4
         with: