diff --git a/.github/workflows/first-responder-docs-content.yml b/.github/workflows/first-responder-docs-content.yml
index ac1d0d7db6..565015c94f 100644
--- a/.github/workflows/first-responder-docs-content.yml
+++ b/.github/workflows/first-responder-docs-content.yml
@@ -10,7 +10,7 @@ jobs:
 
     steps:
     - name: Check if the event originated from a team member
-      uses: actions/github-script@v2.0.0
+      uses: actions/github-script@44b873bc975058192f5279ebe7579496381f575d
       id: set-result
       with:
         github-token: ${{secrets.DOCUBOT_FR_PROJECT_BOARD_WORKFLOWS_REPO_ORG_READ_SCOPES}}
@@ -35,13 +35,13 @@ jobs:
           console.log(`This issue or pull request was authored by an external contributor.`)
           return 'false'
     - name: Label external contributor pull requests with docs-content-fr
-      uses: rachmari/labeler@v1.0.4
+      uses: rachmari/labeler@832d42ec5523f3c6d46e8168de71cd54363e3e2e
       if: steps.set-result.outputs.result == 'false'
       with:
         repo-token: "${{ secrets.DOCUBOT_FR_PROJECT_BOARD_WORKFLOWS_REPO_ORG_READ_SCOPES }}"
         add-labels: "docs-content-fr"
     - name: Triage to FR PR project column
-      uses: rachmari/actions-add-new-issue-to-column@v1.1.1
+      uses: rachmari/actions-add-new-issue-to-column@1a459ef92308ba7c9c9dc2fcdd72f232495574a9
       if: steps.set-result.outputs.result == 'false'
       with:
         action-token: ${{ secrets.DOCUBOT_FR_PROJECT_BOARD_WORKFLOWS_REPO_ORG_READ_SCOPES }}
@@ -58,7 +58,7 @@ jobs:
         GITHUB_CONTEXT: ${{ toJson(github) }}
       run: echo "$GITHUB_CONTEXT"
     - name: Remove card from project
-      uses: actions/github-script@v2.0.0
+      uses: actions/github-script@44b873bc975058192f5279ebe7579496381f575d
       with:
         github-token: ${{secrets.DOCUBOT_FR_PROJECT_BOARD_WORKFLOWS_REPO_ORG_READ_SCOPES}}
         result-encoding: string
diff --git a/.github/workflows/test-translations.yml b/.github/workflows/test-translations.yml
index 58987a1ec2..53c75d4b61 100644
--- a/.github/workflows/test-translations.yml
+++ b/.github/workflows/test-translations.yml
@@ -65,7 +65,7 @@ jobs:
           echo "::set-output name=dir::$(npm config get cache)"
 
       - name: Cache node modules
-        uses: actions/cache@v2
+        uses: actions/cache@d1255ad9362389eac595a9ae406b8e8cb3331f16
         with:
           path: ${{ steps.npm-cache.outputs.dir }}
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}