diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 698a200..0f892c7 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version-file: 'go.mod'
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v3
+        uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3
         with:
           version: ${{ env.GOLANGCI_LINT_VERSION }}
       - name: Download dependencies
@@ -43,13 +43,13 @@ jobs:
           git reset --hard HEAD
       - name: GoReleaser (Snapshot)
         if: "!startsWith(github.ref, 'refs/tags/')"
-        uses: goreleaser/goreleaser-action@v4
+        uses: goreleaser/goreleaser-action@3fa32b8bb5620a2c1afe798654bbad59f9da4906 # v4
         with:
           args: release --snapshot --clean
           version: ${{ env.GORELEASER_VERSION }}
       - name: Upload Snapshot
         if: "!startsWith(github.ref, 'refs/tags/')"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3
         with:
           name: sentry-sendmail
           if-no-files-found: error
@@ -60,7 +60,7 @@ jobs:
         if: startsWith(github.ref, 'refs/tags/')
         run: git fetch --prune --unshallow
       - name: GoReleaser (Release)
-        uses: goreleaser/goreleaser-action@v4
+        uses: goreleaser/goreleaser-action@3fa32b8bb5620a2c1afe798654bbad59f9da4906 # v4
         if: startsWith(github.ref, 'refs/tags/')
         with:
           version: ${{ env.GORELEASER_VERSION }}