diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index f93715e..bb82b3d 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -16,10 +16,10 @@ jobs:
     name: Validate templates
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
+        uses: hashicorp/setup-terraform@633666f66e0061ca3b725c73b2ec20cd13a8fdd1 # v2
 
       - name: Terraform validate for each template
         run: |
@@ -38,7 +38,7 @@ jobs:
       COMMIT_SHORT_SHA: ${{ github.sha }}
       REPO: ${{ github.repository }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Install Coder CLI
         run: |