diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 93ddbb1..e13e2e6 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -8,9 +8,9 @@ jobs:
     name: cargo test
     runs-on: docker
     steps:
-      - uses: https://code.forgejo.org/actions/checkout@v4
+      - uses: https://code.forgejo.org/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - uses: https://github.com/oxsecurity/megalinter@v8
+      - uses: https://github.com/oxsecurity/megalinter@e08c2b05e3dbc40af4c23f41172ef1e068a7d651 # v8
         env:
           MEGALINTER_FLAVOR: cupcake
           GITHUB_SERVER_URL: https://forgejo.wizeazz.nl