diff --git a/.github/workflows/ghcr.yml b/.github/workflows/ghcr.yml
index 09c16a94..9cc02248 100644
--- a/.github/workflows/ghcr.yml
+++ b/.github/workflows/ghcr.yml
@@ -37,14 +37,16 @@ jobs:
           fetch-depth: 0
       - name: Set up QEMU
         id: qemu
-        uses: docker/setup-qemu-action@v3
+        # yamllint disable-line rule:line-length
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a  # v4.0.0
         with:
           image: tonistiigi/binfmt:qemu-v7.0.0-28
           platforms: all
       - name: Available platforms
         run: echo ${{ steps.qemu.outputs.platforms }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        # yamllint disable-line rule:line-length
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2  # v4.0.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}