diff --git a/.github/workflows/deploy-preview.yaml b/.github/workflows/deploy-preview.yaml
index 2dd5990..d82a662 100644
--- a/.github/workflows/deploy-preview.yaml
+++ b/.github/workflows/deploy-preview.yaml
@@ -37,7 +37,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Comment preview URL
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4
         with:
           header: cf-preview
           message: |
diff --git a/.github/workflows/deploy_reusable.yaml b/.github/workflows/deploy_reusable.yaml
index 62b40f1..df154d5 100644
--- a/.github/workflows/deploy_reusable.yaml
+++ b/.github/workflows/deploy_reusable.yaml
@@ -242,7 +242,7 @@ jobs:
 
       - name: Deploy to Cloudflare Pages
         id: deploy
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@9acf94ace14e7dc412b076f2c5c20b8ce93c79cd # v3.15.0
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}