diff --git a/.github/actions/save-logs/action.yaml b/.github/actions/save-logs/action.yaml
index fbb3bfce9..d228a92e1 100644
--- a/.github/actions/save-logs/action.yaml
+++ b/.github/actions/save-logs/action.yaml
@@ -10,7 +10,7 @@ runs:
         sudo chown $USER /tmp/uds-*.log || echo ""
       shell: bash
 
-    - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+    - uses: actions/upload-artifact@1eb3cb2b3e0f29609092a73eb033bb759a334595 # v4.1.0
       with:
         name: debug-log
         path: |
diff --git a/.github/actions/setup/action.yaml b/.github/actions/setup/action.yaml
index ecead8906..49ed1e2b2 100644
--- a/.github/actions/setup/action.yaml
+++ b/.github/actions/setup/action.yaml
@@ -13,7 +13,7 @@ runs:
         download-init-package: true
 
     - name: Use Node.js latest
-      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
       with:
         node-version: 20
 
diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml
index 244950344..413ab82a5 100644
--- a/.github/workflows/commitlint.yaml
+++ b/.github/workflows/commitlint.yaml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
 
       - name: Install commitlint
         run: npm install --save-dev @commitlint/{config-conventional,cli}
diff --git a/.github/workflows/tag-and-release.yml b/.github/workflows/tag-and-release.yml
index f5ab2b93f..0c0480a3a 100644
--- a/.github/workflows/tag-and-release.yml
+++ b/.github/workflows/tag-and-release.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Create release tag
         id: tag
-        uses: google-github-actions/release-please-action@v3
+        uses: google-github-actions/release-please-action@cc61a07e2da466bebbc19b3a7dd01d6aecb20d1e # v4
         with:
           command: manifest # use configs in release-please-config.json
       - id: release-flag
@@ -38,7 +38,7 @@ jobs:
         uses: ./.github/actions/setup
 
       - name: Login to GHCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
         with:
           registry: ghcr.io
           username: dummy