diff --git a/.github/workflows/algolia-search-scraper.yml b/.github/workflows/algolia-search-scraper.yml
index 583dfc6..eef0978 100644
--- a/.github/workflows/algolia-search-scraper.yml
+++ b/.github/workflows/algolia-search-scraper.yml
@@ -18,7 +18,7 @@ jobs:
             "docs",            
           ]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: config
         name: Read ${{ matrix.version }}.json
         shell: bash
@@ -26,12 +26,12 @@ jobs:
           content=$(cat ./.github/config/${{ matrix.version }}.json | jq -r tostring)
           echo "configJSON=$content" >> $GITHUB_OUTPUT
       - name: Checkout algolia/docsearch-scraper
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           repository: algolia/docsearch-scraper
           path: "./algolia"
       - name: Set up Python
-        uses: actions/setup-python@v4.5.0
+        uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
         with:
           python-version: "3.6"
       - name: Install pipenv
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0f5b430..97aa208 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,7 +14,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Build
         uses: ConsenSys/github-actions/docs-build@7256f3d39c7bb71ec4ca9fc6078991302d4c8650
diff --git a/.github/workflows/case.yml b/.github/workflows/case.yml
index f3422aa..0b5dc01 100644
--- a/.github/workflows/case.yml
+++ b/.github/workflows/case.yml
@@ -16,7 +16,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Case check action
         uses: ConsenSys/github-actions/docs-case-check@7256f3d39c7bb71ec4ca9fc6078991302d4c8650
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 4b876a5..908427d 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -14,7 +14,7 @@ jobs:
       matrix:
         file-extensions: [".md", ".mdx"]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: LinkCheck
         uses: ConsenSys/github-actions/docs-link-check@7256f3d39c7bb71ec4ca9fc6078991302d4c8650
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 34ea668..e8d1309 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Lint code
         uses: ConsenSys/github-actions/docs-lint-all@7256f3d39c7bb71ec4ca9fc6078991302d4c8650
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 5b8f065..9bedd62 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -24,7 +24,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Release
         uses: Consensys/github-actions/docs-release@7256f3d39c7bb71ec4ca9fc6078991302d4c8650
         with:
diff --git a/.github/workflows/renovatebot.yml b/.github/workflows/renovatebot.yml
index 7650e5a..cae3364 100644
--- a/.github/workflows/renovatebot.yml
+++ b/.github/workflows/renovatebot.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-24.04
     environment: security
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Run renovatebot
         uses: ConsenSys/github-actions/renovatebot@7256f3d39c7bb71ec4ca9fc6078991302d4c8650 # main
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index 01c46e4..bae2ac6 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Vale
         uses: Consensys/github-actions/docs-spelling-check@7256f3d39c7bb71ec4ca9fc6078991302d4c8650
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 8c3b8ba..198e5a4 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -11,7 +11,7 @@ jobs:
     name: Run trivy scanner
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Trivy
         uses: ConsenSys/github-actions/trivy@7256f3d39c7bb71ec4ca9fc6078991302d4c8650
         with: