diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 160de36..38f4c3c 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -25,3 +25,5 @@ updates:
     labels:
       - "type:dependabot"
       - "type:dependencies-github-actions"
+    cooldown:
+      default-days: 7
\ No newline at end of file
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 601c12d..608db79 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -56,10 +56,10 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Checkout windows-drivers-rs actions
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           repository: microsoft/windows-drivers-rs
           ref: main
diff --git a/.github/workflows/cargo-audit.yaml b/.github/workflows/cargo-audit.yaml
index 54627a8..23be12a 100644
--- a/.github/workflows/cargo-audit.yaml
+++ b/.github/workflows/cargo-audit.yaml
@@ -24,9 +24,9 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Run Cargo Audit
-        uses: rustsec/audit-check@v1
+        uses: rustsec/audit-check@e9159ac5f7d7d873ce074ca134da2f445c0a4a61 # v1.3.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/code-formatting-check.yaml b/.github/workflows/code-formatting-check.yaml
index 0860f17..d58efb8 100644
--- a/.github/workflows/code-formatting-check.yaml
+++ b/.github/workflows/code-formatting-check.yaml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Install Rust Toolchain (Nightly)
         uses: dtolnay/rust-toolchain@nightly
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Install Rust Toolchain (Stable)
         uses: dtolnay/rust-toolchain@stable
@@ -43,7 +43,7 @@ jobs:
       # Once taplo ships a release with field-level `keys` matching, this can
       # be simplified back to install-action with a normal version pin.
       - name: Install taplo-cli from pinned revision b673b44d
-        uses: taiki-e/cache-cargo-install-action@v3
+        uses: taiki-e/cache-cargo-install-action@9ee83daaa7b96a6fab930949ecf1122bba04a389 # v3.0.8
         with:
           tool: taplo-cli
           git: https://github.com/tamasfe/taplo
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index fec6a36..2fd4192 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -54,10 +54,10 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Checkout windows-drivers-rs actions
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           repository: microsoft/windows-drivers-rs
           ref: main
diff --git a/.github/workflows/github-dependency-review.yaml b/.github/workflows/github-dependency-review.yaml
index 436d0bb..a6162f2 100644
--- a/.github/workflows/github-dependency-review.yaml
+++ b/.github/workflows/github-dependency-review.yaml
@@ -19,10 +19,10 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
         with:
           allow-licenses: >-
             MIT,
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index a8d6f21..16ceaa0 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -52,10 +52,10 @@ jobs:
     runs-on: ${{ matrix.runner.name }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Checkout windows-drivers-rs actions
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           repository: microsoft/windows-drivers-rs
           ref: main
@@ -110,10 +110,10 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Checkout windows-drivers-rs actions
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           repository: microsoft/windows-drivers-rs
           ref: main