diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 3cfe428f7..d2fbe21bf 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -46,7 +46,7 @@ jobs:
       run: |
         mkdir -p ${{github.workspace}}/ros2/src
 
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4
       with:
         path: 'ros2/src/realsense-ros'
 
@@ -61,17 +61,17 @@ jobs:
     # so, seperating steps with if conditions
     - name: build ROS2 for foxy
       if: ${{ matrix.ros_distro == 'foxy' }}
-      uses: ros-tooling/setup-ros@v0.6
+      uses: ros-tooling/setup-ros@0395475ab6416edc274bb3c43673b2091a217e02 #v0.6
       with:
         required-ros-distributions: ${{ matrix.ros_distro }}
     - name: build ROS2 for humble/iron/rolling/jazzy
       if: ${{ matrix.ros_distro != 'foxy' }}
-      uses: ros-tooling/setup-ros@v0.7
+      uses: ros-tooling/setup-ros@a6ce30ecca1e5dcc10ae5e6a44fe2169115bf852 #v0.7
       with:
         required-ros-distributions: ${{ matrix.ros_distro }}
 
     - name: Checkout librealsense/development
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4
       with:
         repository: IntelRealSense/librealsense
         path: librealsense
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index 29122ffe1..689f0db7d 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -45,6 +45,6 @@ jobs:
       BASEDIR: ${{ github.workspace }}/.work
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4
       - name: industrial_ci
         uses: ros-industrial/industrial_ci@master
diff --git a/.github/workflows/static_analysis.yaml b/.github/workflows/static_analysis.yaml
index 26cb9bb20..710b9df92 100644
--- a/.github/workflows/static_analysis.yaml
+++ b/.github/workflows/static_analysis.yaml
@@ -13,7 +13,7 @@ jobs:
     name: cppcheck
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 #v3
 
       - name: Install 
         shell: bash