diff --git a/.github/workflows/helmfile_production_apply.yaml b/.github/workflows/helmfile_production_apply.yaml
index ac4cff8eb..250380fde 100644
--- a/.github/workflows/helmfile_production_apply.yaml
+++ b/.github/workflows/helmfile_production_apply.yaml
@@ -41,6 +41,6 @@ jobs:
             ./helmfile/getContext.sh true
       - name: Run helmfile
         id: helmfile_apply
-        uses: helmfile/helmfile-action@v1.0.0
+        uses: helmfile/helmfile-action@8b31cda1cefc2d62c18850c8cd3e1bef54b476dd # v1.7.0
         with:
           helmfile-args: apply --environment production
\ No newline at end of file
diff --git a/.github/workflows/helmfile_production_plan.yaml b/.github/workflows/helmfile_production_plan.yaml
index ad1afb23b..e2c5b8d38 100644
--- a/.github/workflows/helmfile_production_plan.yaml
+++ b/.github/workflows/helmfile_production_plan.yaml
@@ -40,7 +40,7 @@ jobs:
         run: |
             ./helmfile/getContext.sh true
       - name: Setup helmfile
-        uses: mamezou-tech/setup-helmfile@v2.0.0
+        uses: mamezou-tech/setup-helmfile@03233e1cd9b19b2ba320e431f7bcc0618db4248d # v2.0.0
         with:
           install-kubectl: no
           install-helm: yes
@@ -51,7 +51,7 @@ jobs:
           helmfile --environment staging diff >> $GITHUB_OUTPUT
           echo 'EOF' >> $GITHUB_OUTPUT
       - name: Helmfile Diff Comment
-        uses: mshick/add-pr-comment@v2
+        uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
         with:
           message: | 
             ${{join(steps.helmfile_diff.outputs.*, '\n')}}
diff --git a/.github/workflows/helmfile_staging_apply.yaml b/.github/workflows/helmfile_staging_apply.yaml
index 840c65feb..c88bfe128 100644
--- a/.github/workflows/helmfile_staging_apply.yaml
+++ b/.github/workflows/helmfile_staging_apply.yaml
@@ -39,6 +39,6 @@ jobs:
             ./helmfile/getContext.sh true
       - name: Run helmfile
         id: helmfile_apply
-        uses: helmfile/helmfile-action@v1.0.0
+        uses: helmfile/helmfile-action@8b31cda1cefc2d62c18850c8cd3e1bef54b476dd # v1.7.0
         with:
           helmfile-args: apply --environment staging
diff --git a/.github/workflows/helmfile_staging_plan.yaml b/.github/workflows/helmfile_staging_plan.yaml
index 67e875766..6d4d53666 100644
--- a/.github/workflows/helmfile_staging_plan.yaml
+++ b/.github/workflows/helmfile_staging_plan.yaml
@@ -36,7 +36,7 @@ jobs:
         run: |
             ./helmfile/getContext.sh true
       - name: Setup helmfile
-        uses: mamezou-tech/setup-helmfile@v2.0.0
+        uses: mamezou-tech/setup-helmfile@03233e1cd9b19b2ba320e431f7bcc0618db4248d # v2.0.0
         with:
           install-kubectl: no
           install-helm: yes
@@ -47,7 +47,7 @@ jobs:
           helmfile --environment staging diff >> $GITHUB_OUTPUT
           echo 'EOF' >> $GITHUB_OUTPUT
       - name: Helmfile Diff Comment
-        uses: mshick/add-pr-comment@v2
+        uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
         with:
           message: | 
             ${{join(steps.helmfile_diff.outputs.*, '\n')}}