diff --git a/.github/workflows/container.yaml b/.github/workflows/container.yaml
index 7fb20421a..afd4e25f3 100644
--- a/.github/workflows/container.yaml
+++ b/.github/workflows/container.yaml
@@ -199,7 +199,7 @@ jobs:
 
       - id: login
         name: Login to Docker Hub
-        uses: docker/login-action@v4
+        uses: docker/login-action@v4.5.2
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
@@ -250,7 +250,7 @@ jobs:
 
       - id: login
         name: Login to Docker Hub
-        uses: docker/login-action@v4
+        uses: docker/login-action@v4.5.2
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index bc3df294b..1f14e92f2 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -36,7 +36,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
@@ -47,7 +47,7 @@ jobs:
 
       - id: tools
         name: Install Tools
-        uses: taiki-e/install-action@v2
+        uses: taiki-e/install-action@v2.85.5
         with:
           tool: grcov,cargo-llvm-cov
 
diff --git a/.github/workflows/db-benchmarking.yaml b/.github/workflows/db-benchmarking.yaml
index 4bdc6dfb2..3134e7e75 100644
--- a/.github/workflows/db-benchmarking.yaml
+++ b/.github/workflows/db-benchmarking.yaml
@@ -40,7 +40,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
@@ -70,7 +70,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
@@ -100,7 +100,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
diff --git a/.github/workflows/db-compatibility.yaml b/.github/workflows/db-compatibility.yaml
index be73ca9e2..9f295e81d 100644
--- a/.github/workflows/db-compatibility.yaml
+++ b/.github/workflows/db-compatibility.yaml
@@ -44,7 +44,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
@@ -81,7 +81,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
diff --git a/.github/workflows/generate_coverage_pr.yaml b/.github/workflows/generate_coverage_pr.yaml
index 8295fbe5e..582d3cce4 100644
--- a/.github/workflows/generate_coverage_pr.yaml
+++ b/.github/workflows/generate_coverage_pr.yaml
@@ -42,7 +42,7 @@ jobs:
 
       - id: tools
         name: Install Tools
-        uses: taiki-e/install-action@v2
+        uses: taiki-e/install-action@v2.85.5
         with:
           tool: grcov,cargo-llvm-cov
 
diff --git a/.github/workflows/os-compatibility.yaml b/.github/workflows/os-compatibility.yaml
index 83076a716..2b9c4c6ff 100644
--- a/.github/workflows/os-compatibility.yaml
+++ b/.github/workflows/os-compatibility.yaml
@@ -40,7 +40,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
diff --git a/.github/workflows/security-scan.yaml b/.github/workflows/security-scan.yaml
index 0b17ee74b..aeb38f954 100644
--- a/.github/workflows/security-scan.yaml
+++ b/.github/workflows/security-scan.yaml
@@ -85,7 +85,7 @@ jobs:
           scanners: "vuln"
 
       - name: Upload SARIF to Code Scanning
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         if: always()
         with:
           sarif_file: trivy-results.sarif
diff --git a/.github/workflows/testing.yaml b/.github/workflows/testing.yaml
index 666700f79..b17f39463 100644
--- a/.github/workflows/testing.yaml
+++ b/.github/workflows/testing.yaml
@@ -57,7 +57,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache
@@ -76,7 +76,7 @@ jobs:
 
       - id: tools
         name: Install Tools
-        uses: taiki-e/install-action@v2
+        uses: taiki-e/install-action@v2.85.5
         with:
           tool: cargo-llvm-cov, cargo-nextest
 
@@ -150,7 +150,7 @@ jobs:
 
       - id: sccache
         name: Install sccache (GHA backend)
-        uses: mozilla-actions/sccache-action@v0.0.10
+        uses: mozilla-actions/sccache-action@v0.0.11
 
       - id: enable-sccache
         name: Enable sccache