diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 92ebf80..08e4074 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -158,14 +158,14 @@ jobs:
 
       - name: Build - Set up QEMU
         if: ${{ inputs.build }}
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
         with:
           ## Temporary due to bug in qemu:  https://github.com/docker/setup-qemu-action/issues/198
           image: tonistiigi/binfmt:qemu-v7.0.0-28
 
       - name: Build - Set up Docker Buildx
         if: ${{ inputs.build }}
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
         with:
           # This required by local registry
           driver-opts: network=host
@@ -173,7 +173,7 @@ jobs:
       - name: Build - Build the base image
         # Don't need to build the base image when publish
         if: ${{ inputs.build && !inputs.publish }}
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           context: ${{ env.BASE_IMAGE_PATH }}
           tags: ${{ env.BASE_IMAGE_URL }}
@@ -196,7 +196,7 @@ jobs:
 
       - name: Build - Build and push test image
         if: ${{ inputs.build }}
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           context: ${{ env.IMAGE_PATH }}
           tags: ${{ env.IMAGE_URL }}
@@ -329,7 +329,7 @@ jobs:
 
       - name: Publish - Login to GitHub Container Registry
         if: ${{ inputs.publish }}
-        uses: docker/login-action@v2
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -337,14 +337,14 @@ jobs:
 
       - name: Publish - Login to Dockerhub Registry
         if: ${{ inputs.publish }}
-        uses: docker/login-action@v2
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Publish - Push Image
         if: ${{ inputs.publish }}
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           context: ${{ env.IMAGE_PATH }}
           push: true