diff --git a/.github/actions/dependencies/action.yaml b/.github/actions/dependencies/action.yaml
index d2f2e1e..f97384d 100644
--- a/.github/actions/dependencies/action.yaml
+++ b/.github/actions/dependencies/action.yaml
@@ -11,7 +11,7 @@ runs:
         echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
 
     - name: Setup dependency cache
-      uses: actions/cache@v3
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
         key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
diff --git a/.github/actions/environment/action.yaml b/.github/actions/environment/action.yaml
index 12e3953..545a62f 100644
--- a/.github/actions/environment/action.yaml
+++ b/.github/actions/environment/action.yaml
@@ -5,13 +5,13 @@ runs:
 
   steps:
     - name: Setup pnpm
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@7088e561eb65bb68695d245aa206f005ef30921d # v4.1.0
       with:
         version: 8.x
         run_install: false
 
     - name: Setup node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
       with:
         node-version-file: '.nvmrc'
         cache: 'pnpm'
diff --git a/.github/actions/playwright/action.yaml b/.github/actions/playwright/action.yaml
index 47a526f..d2e975c 100644
--- a/.github/actions/playwright/action.yaml
+++ b/.github/actions/playwright/action.yaml
@@ -13,7 +13,7 @@ runs:
 
     - name: Cache playwright browsers per version
       id: cache-playwright-browsers
-      uses: actions/cache@v3
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: ~/.cache/ms-playwright
         key: playwright-browsers-${{ env.PLAYWRIGHT_VERSION }}
diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index bf0deea..830ace2 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -13,11 +13,11 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - name: Create .env file
-        uses: SpicyPizza/create-envfile@v2.0
+        uses: SpicyPizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f # v2.0
         with:
           envkey_BUILD: production
           envkey_DEBUG: false
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d6b1b3f..2068286 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
 
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - name: Run Build
@@ -39,7 +39,7 @@ jobs:
       - run: pnpm run test:integration
         env:
           CI: true
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         if: always()
         with:
           name: playwright-results
diff --git a/.github/workflows/pull_request.yaml b/.github/workflows/pull_request.yaml
index 77e2b09..1f54b6f 100644
--- a/.github/workflows/pull_request.yaml
+++ b/.github/workflows/pull_request.yaml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
 
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - name: Check Lint
@@ -46,7 +46,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Setup environment and dependencies
         uses: ./.github/actions/setup
       - name: Run Unit Tests