diff --git a/.github/workflows/labelsync.yml b/.github/workflows/labelsync.yml
index e2576f7..b0afd7b 100644
--- a/.github/workflows/labelsync.yml
+++ b/.github/workflows/labelsync.yml
@@ -7,4 +7,4 @@ on:
 
 jobs:
   label_sync:
-    uses: Jaronline/.github/.github/workflows/reusable-labelsync.yml@main
+    uses: Jaronline/.github/.github/workflows/reusable-labelsync.yml@946a8b0da43a96901ab29d2daf3a1b254ae138f6 # main
diff --git a/.github/workflows/reusable-labelsync.yml b/.github/workflows/reusable-labelsync.yml
index 0270a41..ba3d3e3 100644
--- a/.github/workflows/reusable-labelsync.yml
+++ b/.github/workflows/reusable-labelsync.yml
@@ -35,4 +35,4 @@ jobs:
           repository: ${{ inputs.repository }}
           submodules: ${{ inputs.with-submodules }}
       - name: Run Label Sync
-        uses: Compairifuel/.github/actions/labelsync@main
+        uses: Compairifuel/.github/actions/labelsync@c05ff467c376ced04699223c100c8cda4fbc81fe # main
diff --git a/actions/setup-java-gradle/action.yml b/actions/setup-java-gradle/action.yml
index 7f400de..00ad9d4 100644
--- a/actions/setup-java-gradle/action.yml
+++ b/actions/setup-java-gradle/action.yml
@@ -27,18 +27,18 @@ runs:
   steps:
     - name: Set up swap space
       if: runner.os == 'Linux'
-      uses: pierotofy/set-swap-space@v1.0
+      uses: pierotofy/set-swap-space@49819abfb41bd9b44fb781159c033dba90353a7c # v1.0
       with:
         swap-size-gb: 10
 
     - name: Setup JDK
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: ${{ inputs.java-distribution }}
 
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@v5
+      uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5
       with:
         gradle-version: ${{ inputs.gradle-version }}
         cache-read-only: ${{ inputs.cache-read-only }}