diff --git a/.github/workflows/checkdocs.yml b/.github/workflows/checkdocs.yml
index 7484f74ec3..0f19157625 100644
--- a/.github/workflows/checkdocs.yml
+++ b/.github/workflows/checkdocs.yml
@@ -96,7 +96,7 @@ jobs:
         run: find docs/cmdline-opts -name "*.md" ! -name "_*" ! -name MANPAGE.md -print0 | xargs -0 -n1 .github/scripts/cleancmd.pl
 
       - name: Run linkspector
-        uses: umbrelladocs/action-linkspector@v1
+        uses: umbrelladocs/action-linkspector@fc382e19892aca958e189954912fe379a8df270c # v1
         with:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index d23befbbf5..cdcdcfc443 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -664,7 +664,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: 'vcpkg cache setup'
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           script: |
             core.exportVariable('ACTIONS_CACHE_URL', process.env.ACTIONS_CACHE_URL || '');