diff --git a/.github/workflows/publish-cdn-test.yml b/.github/workflows/publish-cdn-test.yml
index 1f4934353..e4a4870ab 100644
--- a/.github/workflows/publish-cdn-test.yml
+++ b/.github/workflows/publish-cdn-test.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           fetch-depth: '0'
       - name: Use Node.js 20.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 #v4.0.4
         with:
           node-version: '20.x'
           cache: 'yarn'
@@ -26,7 +26,7 @@ jobs:
         run: yarn install
       - name: Build cdn folder
         run: yarn build:cdn
-      - uses: jakejarvis/s3-sync-action@master
+      - uses: jakejarvis/s3-sync-action@be0c4ab89158cac4278689ebedd8407dd5f35a83 #v0.5.1
         with:
           args: --acl public-read --follow-symlinks
         env:
@@ -37,7 +37,7 @@ jobs:
           AWS_S3_ENDPOINT: https://${{ secrets.COMMON_COS_ENDPOINT }}
           SOURCE_DIR: 'cdn'
           DEST_DIR: '/common/carbon/plex-test'
-      - uses: jakejarvis/s3-sync-action@master
+      - uses: jakejarvis/s3-sync-action@be0c4ab89158cac4278689ebedd8407dd5f35a83 #v0.5.1
         with:
           args: --acl public-read --follow-symlinks
         env: