diff --git a/.github/workflows/delete-untagged-packages.yml b/.github/workflows/delete-untagged-packages.yml
index ecf9a949..42e9fd5a 100644
--- a/.github/workflows/delete-untagged-packages.yml
+++ b/.github/workflows/delete-untagged-packages.yml
@@ -13,19 +13,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Delete untagged dev-cache packages
-        uses: actions/delete-package-versions@v5.0.0
+        uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
         with:
           package-name: "ss-python/dev-cache"
           package-type: "container"
           delete-only-untagged-versions: "true"
       - name: Delete untagged development packages
-        uses: actions/delete-package-versions@v5.0.0
+        uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
         with:
           package-name: "ss-python/dev"
           package-type: "container"
           delete-only-untagged-versions: "true"
       - name: Delete untagged production packages
-        uses: actions/delete-package-versions@v5.0.0
+        uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
         with:
           package-name: "ss-python"
           package-type: "container"
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/delete-untagged-packages.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/delete-untagged-packages.yml.jinja
index 1fac9125..6b077fb8 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/delete-untagged-packages.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/delete-untagged-packages.yml.jinja	
@@ -13,19 +13,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Delete untagged dev-cache packages
-        uses: actions/delete-package-versions@v5.0.0
+        uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
         with:
           package-name: "{{ repo_name }}/dev-cache"
           package-type: "container"
           delete-only-untagged-versions: "true"
       - name: Delete untagged development packages
-        uses: actions/delete-package-versions@v5.0.0
+        uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
         with:
           package-name: "{{ repo_name }}/dev"
           package-type: "container"
           delete-only-untagged-versions: "true"
       - name: Delete untagged production packages
-        uses: actions/delete-package-versions@v5.0.0
+        uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0
         with:
           package-name: "{{ repo_name }}"
           package-type: "container"