diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
index c6eda7802..c41b0f639 100644
--- a/.github/workflows/actions.yml
+++ b/.github/workflows/actions.yml
@@ -43,22 +43,22 @@ jobs:
            test_suite: 'verify -P docker-integration-test,python-integration-tests -DskipUTs'
            artifacts_dir: "ecchronos-binary/target"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Cache local Maven repository
-        uses: actions/cache@v3
+        uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
         with:
           path: ~/.m2/repository
           key: build-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
           restore-keys: |
             build-${{ runner.os }}-maven-
       - name: Set up JDK
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
         with:
           java-version: 11
           distribution: 'temurin'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Set up Python 3.8
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0
         with:
           python-version: 3.8
       - name: install dependencies
@@ -69,13 +69,13 @@ jobs:
           TEST_SUITE: ${{ matrix.test_suite }}
       - name: Upload artifacts
         if: ${{ failure() && steps.tests.conclusion == 'failure' }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: ${{ matrix.name }}-cassandra-logs
           path: ${{ matrix.artifacts_dir }}/cassandra*.log
           if-no-files-found: 'ignore'
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: >