diff --git a/.forgejo/actions/sccache/action.yml b/.forgejo/actions/sccache/action.yml
index fd22591ae..3e0fbd540 100644
--- a/.forgejo/actions/sccache/action.yml
+++ b/.forgejo/actions/sccache/action.yml
@@ -7,7 +7,7 @@ runs:
   using: composite
   steps:
   - name: Install sccache
-    uses: https://forgejo.ellis.link/continuwuation/sccache-action@v1
+    uses: https://forgejo.ellis.link/continuwuation/sccache-action@b5ae5b4541ed5fb0f616e3cb616bf213fefa1c40 # v1
   - name: Configure sccache
     uses: https://github.com/actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
     with:
diff --git a/.forgejo/actions/setup-llvm-with-apt/action.yml b/.forgejo/actions/setup-llvm-with-apt/action.yml
index 213f3abb1..4deec4493 100644
--- a/.forgejo/actions/setup-llvm-with-apt/action.yml
+++ b/.forgejo/actions/setup-llvm-with-apt/action.yml
@@ -29,7 +29,7 @@ runs:
   steps:
     - name: Detect runner OS
       id: runner-os
-      uses: https://forgejo.ellis.link/continuwuation/detect-versions@v1
+      uses: https://forgejo.ellis.link/continuwuation/detect-versions@d39555789fed25b8eb8e086d9f199c514dfa311e # v1
 
     - name: Configure cross-compilation architecture
       if: inputs.dpkg-arch != ''
diff --git a/.forgejo/actions/setup-rust/action.yml b/.forgejo/actions/setup-rust/action.yml
index 52126179c..a6d3988a5 100644
--- a/.forgejo/actions/setup-rust/action.yml
+++ b/.forgejo/actions/setup-rust/action.yml
@@ -39,7 +39,7 @@ runs:
   steps:
     - name: Detect runner OS
       id: runner-os
-      uses: https://forgejo.ellis.link/continuwuation/detect-versions@v1
+      uses: https://forgejo.ellis.link/continuwuation/detect-versions@d39555789fed25b8eb8e086d9f199c514dfa311e # v1
 
     - name: Configure Cargo environment
       shell: bash
@@ -147,7 +147,7 @@ runs:
       run: echo "::group::📦 Restoring build cache"
 
     - name: Setup sccache
-      uses: https://forgejo.ellis.link/continuwuation/sccache-action@v1
+      uses: https://forgejo.ellis.link/continuwuation/sccache-action@b5ae5b4541ed5fb0f616e3cb616bf213fefa1c40 # v1
 
     - name: End build cache restore group
       shell: bash
diff --git a/.forgejo/workflows/build-debian.yml b/.forgejo/workflows/build-debian.yml
index 20a4a5955..15440b653 100644
--- a/.forgejo/workflows/build-debian.yml
+++ b/.forgejo/workflows/build-debian.yml
@@ -60,7 +60,7 @@ jobs:
             cargo-debian-${{ steps.debian-version.outputs.distribution }}-${{ matrix.arch }}-
 
       - name: Setup sccache
-        uses: https://forgejo.ellis.link/continuwuation/sccache-action@v1
+        uses: https://forgejo.ellis.link/continuwuation/sccache-action@b5ae5b4541ed5fb0f616e3cb616bf213fefa1c40 # v1
 
       - name: Configure sccache environment
         run: |
diff --git a/.forgejo/workflows/documentation.yml b/.forgejo/workflows/documentation.yml
index aed562591..141551007 100644
--- a/.forgejo/workflows/documentation.yml
+++ b/.forgejo/workflows/documentation.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Detect runner environment
         id: runner-env
-        uses: https://forgejo.ellis.link/continuwuation/detect-versions@v1
+        uses: https://forgejo.ellis.link/continuwuation/detect-versions@d39555789fed25b8eb8e086d9f199c514dfa311e # v1
 
       - name: Setup Node.js
         if: steps.runner-env.outputs.node_major == '' || steps.runner-env.outputs.node_major < '20'