diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 3cfe428f7..bae808d38 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -46,7 +46,7 @@ jobs:
       run: |
         mkdir -p ${{github.workspace}}/ros2/src
 
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4
       with:
         path: 'ros2/src/realsense-ros'
 
@@ -61,17 +61,17 @@ jobs:
     # so, seperating steps with if conditions
     - name: build ROS2 for foxy
       if: ${{ matrix.ros_distro == 'foxy' }}
-      uses: ros-tooling/setup-ros@v0.6
+      uses: ros-tooling/setup-ros@236ab287884fd5a314fc030e91b2017abb46719e #v0.6
       with:
         required-ros-distributions: ${{ matrix.ros_distro }}
     - name: build ROS2 for humble/iron/rolling/jazzy
       if: ${{ matrix.ros_distro != 'foxy' }}
-      uses: ros-tooling/setup-ros@v0.7
+      uses: ros-tooling/setup-ros@a6ce30ecca1e5dcc10ae5e6a44fe2169115bf852 #v0.7
       with:
         required-ros-distributions: ${{ matrix.ros_distro }}
 
     - name: Checkout librealsense/development
-      uses: actions/checkout@v4
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4
       with:
         repository: IntelRealSense/librealsense
         path: librealsense
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index 29122ffe1..54c1d78d6 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -45,6 +45,6 @@ jobs:
       BASEDIR: ${{ github.workspace }}/.work
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4
       - name: industrial_ci
-        uses: ros-industrial/industrial_ci@master
+        uses: ros-industrial/industrial_ci@d23b9ad2c63bfad638a2b1fe3df34b8df9a2f17b #Replace reference to 'master' with the latest commit hash
diff --git a/.github/workflows/static_analysis.yaml b/.github/workflows/static_analysis.yaml
index 26cb9bb20..b8cdeca85 100644
--- a/.github/workflows/static_analysis.yaml
+++ b/.github/workflows/static_analysis.yaml
@@ -13,7 +13,7 @@ jobs:
     name: cppcheck
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4
 
       - name: Install 
         shell: bash