diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a96939e..a11660b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
   test:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 https://github.com/actions/checkout/commit/ee0669bd1cc54295c223e0bb666b733df41de1c5
 
       - name: Check outdated dependencies
         uses: liquidz/antq-action@master
@@ -18,20 +18,20 @@ jobs:
   project-test:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 https://github.com/actions/checkout/commit/ee0669bd1cc54295c223e0bb666b733df41de1c5
 
-      - uses: actions/setup-java@v2.4.0
+      - uses: actions/setup-java@5f00602cd1b2819185d88dc7a1b1985f598c6705 # v2.4.0 https://github.com/actions/setup-java/commit/5f00602cd1b2819185d88dc7a1b1985f598c6705
         with:
           java-version: 11
           distribution: 'zulu'
 
       - name: Setup Clojure
-        uses: DeLaGuardo/setup-clojure@3.6
+        uses: DeLaGuardo/setup-clojure@0fe110ad5aab7de04967d0f573267f7009aa0609 # 3.6 https://github.com/DeLaGuardo/setup-clojure/commit/0fe110ad5aab7de04967d0f573267f7009aa0609
         with:
           tools-deps: "1.10.3.1040"
 
       - name: Setup Babashka
-        uses: turtlequeue/setup-babashka@v1.3.0
+        uses: turtlequeue/setup-babashka@fff96c154d5aec91d5bbfbb201c5b20f96653084 # v1.3.0 https://github.com/turtlequeue/setup-babashka/commit/fff96c154d5aec91d5bbfbb201c5b20f96653084
         with:
           babashka-version: 0.6.8