diff --git a/.github/workflows/publish_internal.yml b/.github/workflows/publish_internal.yml
index 3b03f59369a..48b955fe5a1 100644
--- a/.github/workflows/publish_internal.yml
+++ b/.github/workflows/publish_internal.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           python-version: "3.10"
       - name: Install pypa/build
-        run: python -m pip install build~=1.0.3
+        run: python -m pip install build==1.*
       - name: Build sdist
         run: python -m build --sdist
       - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
@@ -50,7 +50,7 @@ jobs:
         with:
           python-version: "3.10"
       - name: Install dependencies
-        run: python -m pip install twine~=4.0.2
+        run: python -m pip install twine==4.0.2
       - name: Download artifacts
         uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
         with:
diff --git a/.github/workflows/run_tests_in_tox_custom.yml b/.github/workflows/run_tests_in_tox_custom.yml
index b0328783a27..e1eb15e9ef7 100644
--- a/.github/workflows/run_tests_in_tox_custom.yml
+++ b/.github/workflows/run_tests_in_tox_custom.yml
@@ -51,9 +51,9 @@ jobs:
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: ${{ inputs.python-version }}
       - name: Install dependencies
@@ -66,7 +66,7 @@ jobs:
           GH_CTX_SHA: ${{ github.sha  }}
         run: tox -vv -e tests-${{ inputs.toxenv-task }}-${{ inputs.toxenv-pyver }}-${{ inputs.toxenv-ptver }} -- ${{ inputs.tests-dir }}
       - name: Upload test results
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: ${{ inputs.artifact-prefix }}-${{ inputs.toxenv-task }}-${{ inputs.toxenv-pyver }}-${{ inputs.toxenv-ptver }}
           path: |