diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 8fa2eff..8008d84 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -12,9 +12,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Self-hosted Renovate
-        uses: https://github.com/renovatebot/github-action@v41.0.12
+        uses: https://github.com/renovatebot/github-action@9ad1a8e771c002ece340d1ff028fae4503fe041b # v41.0.12
         with:
           token: ${{ secrets.RENOVATE_TOKEN }}
           env-regex: "^(?:RENOVATE_\\w+|GITHUB_COM_TOKEN)$"