diff --git a/.github/workflows/pr-validate.yaml b/.github/workflows/pr-validate.yaml
index 6dc4112..1ee1073 100644
--- a/.github/workflows/pr-validate.yaml
+++ b/.github/workflows/pr-validate.yaml
@@ -14,11 +14,11 @@ jobs:
   # Pin to main to prevent accidental injection of malicious code
   lint:
     name: Lint
-    uses: mglants/containers/.github/workflows/workflow_call-lint.yaml@main
+    uses: mglants/containers/.github/workflows/workflow_call-lint.yaml@2bcc5b0eed6dd9132070275c45d0b3e04fccc17b # main
 
   get-changed-images:
     name: Get changed images
-    uses: mglants/containers/.github/workflows/workflow_call-get_changed_images.yaml@main
+    uses: mglants/containers/.github/workflows/workflow_call-get_changed_images.yaml@2bcc5b0eed6dd9132070275c45d0b3e04fccc17b # main
 
   build-images:
     name: Build images
@@ -26,7 +26,7 @@ jobs:
       - lint
       - get-changed-images
     if: ${{ needs.get-changed-images.outputs.addedOrModified == 'true' }}
-    uses: mglants/containers/.github/workflows/workflow_call-build_images.yaml@main
+    uses: mglants/containers/.github/workflows/workflow_call-build_images.yaml@2bcc5b0eed6dd9132070275c45d0b3e04fccc17b # main
     permissions:
       contents: read
       packages: read
diff --git a/.github/workflows/workflow_call-lint.yaml b/.github/workflows/workflow_call-lint.yaml
index 9147b64..d20be81 100644
--- a/.github/workflows/workflow_call-lint.yaml
+++ b/.github/workflows/workflow_call-lint.yaml
@@ -35,7 +35,7 @@ jobs:
 
       - name: "Yamllint"
         if: ${{ steps.filter.outputs.yaml == 'true' }}
-        uses: karancode/yamllint-github-action@master
+        uses: karancode/yamllint-github-action@4052d365f09b8d34eb552c363d1141fd60e2aeb2 # master
         with:
           yamllint_file_or_dir: "${{ steps.filter.outputs.yaml_files }}"
           yamllint_strict: false