diff --git a/.github/workflows/ci-validate-typings.yml b/.github/workflows/ci-validate-typings.yml
index be89e914..0005d0f9 100644
--- a/.github/workflows/ci-validate-typings.yml
+++ b/.github/workflows/ci-validate-typings.yml
@@ -15,8 +15,8 @@ jobs:
   validate-typings:
     runs-on: "ubuntu-latest"
     steps:
-    - uses: actions/checkout@v6
-    - uses: typesafegithub/github-actions-typing@v2
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - uses: typesafegithub/github-actions-typing@9ddf35b71a482be7d8922b28e8d00df16b77e315 # v2.2.2
       with:
         ignored-action-files: |
           .github/actions/build-dist/action.yml