diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f7075883..eca1daec 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - run: npm i -fg corepack && corepack enable
       - uses: actions/setup-node@v6
         with:
@@ -23,4 +23,4 @@ jobs:
       - run: pnpm lint
       - run: pnpm test:types
       - run: pnpm vitest run --coverage
-      - uses: codecov/codecov-action@v6
+      - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7