diff --git a/.github/workflows/project-review-status.yml b/.github/workflows/project-review-status.yml
index 730208e..88e1c91 100644
--- a/.github/workflows/project-review-status.yml
+++ b/.github/workflows/project-review-status.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Update Project Status to Review Needed
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           # Use the PAT stored in repository secrets (has project write access)
           github-token: ${{ secrets.PROJECT_TOKEN }}
diff --git a/.github/workflows/validate-logos.yml b/.github/workflows/validate-logos.yml
index cdfdfed..5f5e2b3 100644
--- a/.github/workflows/validate-logos.yml
+++ b/.github/workflows/validate-logos.yml
@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '20'