diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cc223fc..a5c4e64 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,20 +14,17 @@ jobs:
       fail-fast: false
     timeout-minutes: 10
     steps:
-    - uses: actions/checkout@v2
-    - uses: actions/setup-go@v2
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6
+    - uses: actions/setup-go@424fc82d43fa5a37540bae62709ddcc23d9520d4 #2.1.5
       with:
         go-version: ${{ matrix.go }}
     - name: Run Tests
       run: make test
-    - uses: codecov/codecov-action@v2
-      with:
-        fail_ci_if_error: true
 
   docker-build:
     name: Docker Build
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6
     - run: make docker-image
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 054fd22..74ce906 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,13 +11,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@master
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6
       - name: Read VERSION.txt
         id: get_version
         run: echo "##[set-output name=version;]$(cat VERSION.txt)"
       - name: Create Release
         id: create_release
-        uses: actions/create-release@v1
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e #v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with: