diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index e9a1f40..6dd3c59 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: ./.github/actions/set_up_runner
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
@@ -39,7 +39,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: ./.github/actions/set_up_runner
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
@@ -159,6 +159,6 @@ jobs:
       - integration_tests
     if: ${{ always() }}
     steps:
-      - uses: cgrindel/gha_join_jobs@8a9736c29a7e5ebd9f3af2870f59cb6d563b6659 # v1
+      - uses: cgrindel/gha_join_jobs@605424defceef3181c9fde3df903ea8ec35e267a # v1.5.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/move_major_ver_tag_on_release.yml b/.github/workflows/move_major_ver_tag_on_release.yml
index f39093b..3890d3f 100644
--- a/.github/workflows/move_major_ver_tag_on_release.yml
+++ b/.github/workflows/move_major_ver_tag_on_release.yml
@@ -18,26 +18,26 @@ jobs:
       # branches and tags. This is important if the workflow is launched via
       # workspace_dispatch event. It ensures that we can find the release tag
       # and the major version tag.
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # Fetch all history for all branches and tags
           fetch-depth: 0
 
       # Configures the git user config. This is necessary when making changes
       # to a git repository.
-      - uses: cgrindel/gha_configure_git_user@46047897dfe2c31e69e7bc1017fd61b479a6e2b2 # v1
+      - uses: cgrindel/gha_configure_git_user@46047897dfe2c31e69e7bc1017fd61b479a6e2b2 # v1.3.0
 
       # The release tag can come into the workflow via the release event or as
       # a workflow_dispatch event. This step finds the first non-empty value
       # and outputs it as `selected_value`.
       - name: Resolve release_tag
         id: resolve_release_tag
-        uses: cgrindel/gha_select_value@8a3ddf4cb576661235b8c6ce45d3231023e104d7 # v1
+        uses: cgrindel/gha_select_value@8a3ddf4cb576661235b8c6ce45d3231023e104d7 # v1.1.0
         with: 
           value0: ${{ github.event.release.tag_name }}
           value1: ${{ github.event.inputs.release_tag }}
 
       # Create or move the major version tag
-      - uses: cgrindel/gha_move_major_version_tag@d4e7b9cab92bb233953f77b80b390944b9d530d4 # v1
+      - uses: cgrindel/gha_move_major_version_tag@d4e7b9cab92bb233953f77b80b390944b9d530d4 # v1.2.0
         with:
           release_tag: ${{ steps.resolve_release_tag.outputs.selected_value }}