diff --git a/.github/workflows/a2a.yaml b/.github/workflows/a2a.yaml
index 2dbf2e45..109b309e 100644
--- a/.github/workflows/a2a.yaml
+++ b/.github/workflows/a2a.yaml
@@ -28,10 +28,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.13"
 
@@ -58,7 +58,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Docker Compose
         uses: ./.github/actions/setup-compose
diff --git a/.github/workflows/adk-cerebras.yaml b/.github/workflows/adk-cerebras.yaml
index f866088b..dbffae9a 100644
--- a/.github/workflows/adk-cerebras.yaml
+++ b/.github/workflows/adk-cerebras.yaml
@@ -28,10 +28,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/adk.yaml b/.github/workflows/adk.yaml
index 3ead17f5..ef2a85be 100644
--- a/.github/workflows/adk.yaml
+++ b/.github/workflows/adk.yaml
@@ -28,10 +28,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.13"
 
@@ -58,7 +58,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Docker Compose
         uses: ./.github/actions/setup-compose
diff --git a/.github/workflows/agno.yaml b/.github/workflows/agno.yaml
index c98fe1a1..389a9fa7 100644
--- a/.github/workflows/agno.yaml
+++ b/.github/workflows/agno.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Install uv
         run: |
@@ -51,7 +51,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Docker Compose
         uses: ./.github/actions/setup-compose
diff --git a/.github/workflows/akka.yaml b/.github/workflows/akka.yaml
index 0a5149b2..c9d4664f 100644
--- a/.github/workflows/akka.yaml
+++ b/.github/workflows/akka.yaml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Docker Compose
         uses: ./.github/actions/setup-compose
diff --git a/.github/workflows/crew-ai.yaml b/.github/workflows/crew-ai.yaml
index 4d9fccb3..25d7f428 100644
--- a/.github/workflows/crew-ai.yaml
+++ b/.github/workflows/crew-ai.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Install poetry
         run: pipx install poetry
@@ -52,7 +52,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Docker Compose
         uses: ./.github/actions/setup-compose
diff --git a/.github/workflows/langgraph.yaml b/.github/workflows/langgraph.yaml
index 14b9727b..4e4ea098 100644
--- a/.github/workflows/langgraph.yaml
+++ b/.github/workflows/langgraph.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Install uv
         run: |
@@ -51,7 +51,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Set up Docker Compose
         uses: ./.github/actions/setup-compose
diff --git a/.github/workflows/markdownlint.yaml b/.github/workflows/markdownlint.yaml
index f794447c..85a32c9b 100644
--- a/.github/workflows/markdownlint.yaml
+++ b/.github/workflows/markdownlint.yaml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Install Task
         uses: arduino/setup-task@8b35f53e4d5a51bf691c94c71f2c7222483206cb
diff --git a/.github/workflows/yamllint.yaml b/.github/workflows/yamllint.yaml
index 56456705..de39a084 100644
--- a/.github/workflows/yamllint.yaml
+++ b/.github/workflows/yamllint.yaml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Install Task
         uses: arduino/setup-task@8b35f53e4d5a51bf691c94c71f2c7222483206cb