diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index bc699c2..34bfc28 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -14,12 +14,12 @@ jobs:
 
     steps:
     - name: Install Go
-      uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a
+      uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.0.2
       with:
         go-version: '1.23'
 
     - name: Check out code
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     - name: Install staticcheck
       run: go install honnef.co/go/tools/cmd/staticcheck@latest
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 14cdeb0..efcd264 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,12 +19,12 @@ jobs:
 
     steps:
     - name: Install Go
-      uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a
+      uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.0.2
       with:
         go-version: ${{ matrix.go-version }}
 
     - name: Check out code
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     - name: Check formatting
       if: ${{ matrix.go-version == '1.23' && matrix.os == 'ubuntu-24.04' }}