diff --git a/.github/workflows/publish-crate.yml b/.github/workflows/publish-crate.yml
index cc79fa0..19b78f0 100644
--- a/.github/workflows/publish-crate.yml
+++ b/.github/workflows/publish-crate.yml
@@ -16,5 +16,5 @@ jobs:
     steps:
       - run: sudo apt install libdbus-1-dev pkg-config
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       - run: cargo publish
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 6161cea..cbf09a8 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
       - run: sudo apt install libdbus-1-dev pkg-config
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
         id: setup_rust
         with:
           components: "rustfmt, clippy"
diff --git a/.github/workflows/version-bump.yml b/.github/workflows/version-bump.yml
index 42d70d8..b18865c 100644
--- a/.github/workflows/version-bump.yml
+++ b/.github/workflows/version-bump.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           fetch-depth: 50
           fetch-tags: true
-      - uses: cargo-bins/cargo-binstall@main
+      - uses: cargo-bins/cargo-binstall@dc19f1e48450eefe5a29b8da6c6b00a87d730b37 # main
       - name: Install dependencies
         run: |
           cargo binstall -y just