diff --git a/.github/workflows/build-push-unity.yml b/.github/workflows/build-push-unity.yml
index d2755a7c..4b45db30 100644
--- a/.github/workflows/build-push-unity.yml
+++ b/.github/workflows/build-push-unity.yml
@@ -28,13 +28,13 @@ jobs:
           - StandaloneLinux64 # Build a Linux 64-bit standalone.
           # - WebGL # WebGL.
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: 0
           lfs: true
 
       - name: Caching Unity Library
-        uses: actions/cache@v2
+        uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace  # v2
         with:
           path: integrations/Unity/simulate-unity/Library
           key: Library-Simulate
@@ -43,7 +43,7 @@ jobs:
             Library-
 
       - name: Build Unity Simulate
-        uses: game-ci/unity-builder@v2
+        uses: game-ci/unity-builder@9f79830454d37cd9e70c4c3b73d26c06bcce2b2a  # v2
         env:
           UNITY_LICENSE: ${{ secrets.UNITY_LICENSE }}
         with:
@@ -57,7 +57,7 @@ jobs:
           cd ${{ github.workspace }}/integrations/Unity/builds/
           tar -cvzf ${{ github.workspace }}/compressed_builds/${{ matrix.targetPlatform }}.tar.gz ./${{ matrix.targetPlatform }}
 
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2  # v2
         with:
           name: Build-${{ matrix.targetPlatform }}
           path: ${{ github.workspace }}/compressed_builds/${{ matrix.targetPlatform }}.tar.gz
@@ -66,7 +66,7 @@ jobs:
   #   name: Simple build and push
   #   runs-on: ubuntu-latest
   #   steps:
-  #     - uses: actions/checkout@v2
+  #     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
   #       with:
   #         fetch-depth: 0
   #         lfs: true
@@ -78,7 +78,7 @@ jobs:
   #         tar -cvzf ${{ github.workspace }}/builds/Standalone.tar.gz ./simulate_godot
 
 
-  #     - uses: actions/upload-artifact@v2
+  #     - uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2  # v2
   #       with:
   #         name: Build-Standalone
   #         path: ./builds/Standalone.tar.gz
@@ -90,11 +90,11 @@ jobs:
     # if: github.event_name == 'release' && github.event.action == 'published'
 
     steps:
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c  # v4
         with:
           python-version: "3.x"
 
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a  # v3
         with:
           # name: artifact
           path: builds
diff --git a/.github/workflows/build_documentation.yml b/.github/workflows/build_documentation.yml
index 829d183f..2ed0efbb 100644
--- a/.github/workflows/build_documentation.yml
+++ b/.github/workflows/build_documentation.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
    build:
-    uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@main
+    uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@90b4ee2c10b81b5c1a6367c4e6fc9e2fb510a7e3  # main
     with:
       commit_sha: ${{ github.sha }}
       package: simulate
diff --git a/.github/workflows/build_pr_documentation.yml b/.github/workflows/build_pr_documentation.yml
index c7816a79..373ed48a 100644
--- a/.github/workflows/build_pr_documentation.yml
+++ b/.github/workflows/build_pr_documentation.yml
@@ -9,7 +9,7 @@ concurrency:
 
 jobs:
   build:
-    uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@main
+    uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@90b4ee2c10b81b5c1a6367c4e6fc9e2fb510a7e3  # main
     with:
       commit_sha: ${{ github.event.pull_request.head.sha }}
       pr_number: ${{ github.event.number }}
diff --git a/.github/workflows/delete_doc_comment.yml b/.github/workflows/delete_doc_comment.yml
index af2bc4c0..e0ba6487 100644
--- a/.github/workflows/delete_doc_comment.yml
+++ b/.github/workflows/delete_doc_comment.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   delete:
-    uses: huggingface/doc-builder/.github/workflows/delete_doc_comment.yml@main
+    uses: huggingface/doc-builder/.github/workflows/delete_doc_comment.yml@90b4ee2c10b81b5c1a6367c4e6fc9e2fb510a7e3  # main
     with:
       pr_number: ${{ github.event.number }}
       package: simulate
\ No newline at end of file
diff --git a/.github/workflows/tests-no-deps.yml b/.github/workflows/tests-no-deps.yml
index 9f860727..24b3a743 100644
--- a/.github/workflows/tests-no-deps.yml
+++ b/.github/workflows/tests-no-deps.yml
@@ -17,14 +17,14 @@ jobs:
             vtk-version: '9.0.3'
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c  # v4
         with:
           python-version: ${{ matrix.python-version }}
 
-      - uses: actions/cache@v3
+      - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c  # v3
         with:
           path: ~/.cache/pip
           key: Python-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.vtk-version }}-${{ hashFiles('setup.py') }}-${{ hashFiles('requirements_test.txt') }}
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index 6e7b34d2..a12aa879 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -19,7 +19,7 @@ jobs:
     name: Build SDist
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - name: Build SDist
       run: pipx run build --sdist
@@ -27,7 +27,7 @@ jobs:
     - name: Check metadata
       run: pipx run twine check dist/*
 
-    - uses: actions/upload-artifact@v3
+    - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5  # v3
       with:
         path: dist/*.tar.gz
 
@@ -41,7 +41,7 @@ jobs:
         os: [ubuntu-20.04, windows-2019, macos-11]
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - uses: pypa/cibuildwheel@v2.10.1
       env:
@@ -54,7 +54,7 @@ jobs:
       shell: bash
 
     - name: Upload wheels
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5  # v3
       with:
         path: wheelhouse/*.whl
 
@@ -66,11 +66,11 @@ jobs:
     if: github.event_name == 'release' && github.event.action == 'published'
 
     steps:
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c  # v4
       with:
         python-version: "3.x"
 
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a  # v3
       with:
         name: artifact
         path: dist