diff --git a/.github/actions/get-shards/action.yml b/.github/actions/get-shards/action.yml
index 3408527..5f4a793 100644
--- a/.github/actions/get-shards/action.yml
+++ b/.github/actions/get-shards/action.yml
@@ -21,7 +21,7 @@ runs:
   using: "composite"
   steps:
     - name: Install nf-test
-      uses: nf-core/setup-nf-test@v1
+      uses: nf-core/setup-nf-test@f2db585128ae681918440f6c074dededeceadce1 # v1
       with:
         version: ${{ env.NFT_VER }}
     - name: Get number of shards
diff --git a/.github/actions/nf-test/action.yml b/.github/actions/nf-test/action.yml
index efe5288..657dfd6 100644
--- a/.github/actions/nf-test/action.yml
+++ b/.github/actions/nf-test/action.yml
@@ -30,14 +30,14 @@ runs:
         python-version: "3.14"
 
     - name: Install nf-test
-      uses: nf-core/setup-nf-test@v1
+      uses: nf-core/setup-nf-test@f2db585128ae681918440f6c074dededeceadce1 # v1
       with:
         version: "${{ env.NFT_VER }}"
         install-pdiff: true
 
     - name: Setup apptainer
       if: contains(inputs.profile, 'singularity')
-      uses: eWaterCycle/setup-apptainer@main
+      uses: eWaterCycle/setup-apptainer@3f706d898c9db585b1d741b4692e66755f3a1b40 # main
 
     - name: Set up Singularity
       if: contains(inputs.profile, 'singularity')