diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 12ff8a3fb..1471e3f84 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -236,7 +236,7 @@ jobs:
           fetch-depth: 2
 
       - name: Extract commit message
-        uses: Alfresco/alfresco-build-tools/.github/actions/get-commit-message@v8.33.0
+        uses: Alfresco/alfresco-build-tools/.github/actions/get-commit-message@ce7f6e0b62727da8600acf87d72ffbf064ac34b5 #v8.33.0
 
       - name: Check ADF link
         shell: bash
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9edfc8296..2999ee2f9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -187,7 +187,7 @@ jobs:
       - uses: ./.github/actions/setup
         with:
           npm_tag: ${{ inputs.npm-tag }}
-      - uses: Alfresco/alfresco-build-tools/.github/actions/configure-git-author@v8.33.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/configure-git-author@ce7f6e0b62727da8600acf87d72ffbf064ac34b5 #v8.33.0
         with:
           username: ${{ vars.BOT_GITHUB_USERNAME }}
           email: ${{ vars.BOT_GITHUB_EMAIL }}
diff --git a/.github/workflows/upstream-adf.yml b/.github/workflows/upstream-adf.yml
index 3f2ccd97b..76fb88918 100644
--- a/.github/workflows/upstream-adf.yml
+++ b/.github/workflows/upstream-adf.yml
@@ -150,7 +150,7 @@ jobs:
           fi
       - name: Commit Code
         if: ${{ needs.upstream.outputs.hasNewVersion == 'true'  }}
-        uses: stefanzweifel/git-auto-commit-action@v6
+        uses: stefanzweifel/git-auto-commit-action@778341af668090896ca464160c2def5d1d1a3eb0 #v6
         with:
           commit_message: "[ci:force][auto-commit] Update dependencies ADF:${{ needs.upstream.outputs.latestADFVersion }}  JS:${{ needs.upstream.outputs.latestJSVersion }}"
           branch: upstream-dependencies