diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9ae2e1f8..d48711e1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -19,10 +19,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Setup Java JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
       with:
         java-version: 21
         distribution: temurin
@@ -71,7 +71,7 @@ jobs:
         echo "path=$OUT_PATH" >> $GITHUB_OUTPUT
 
     - name: Upload release build
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       if: ${{ matrix.config.lower == 'release' }}
       with:
         name: geode-launcher-${{ matrix.config.lower }}
@@ -81,7 +81,7 @@ jobs:
           ${{ steps.rename_mappings.outputs.path }}
 
     - name: Upload debug build
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       if: ${{ matrix.config.lower == 'debug' }}
       with:
         name: geode-launcher-${{ matrix.config.lower }}