diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0cd3a7b1..d173058e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
 
     # See https://github.com/helm/chart-releaser-action/issues/6
     - name: Install Helm
-      uses: azure/setup-helm@v1
+      uses: azure/setup-helm@f382f75448129b3be48f8121b9857be18d815a82
       with:
         version: v3.10.0
 
diff --git a/.github/workflows/update_rasa_x_version.yml b/.github/workflows/update_rasa_x_version.yml
index 0940e048..827eed62 100644
--- a/.github/workflows/update_rasa_x_version.yml
+++ b/.github/workflows/update_rasa_x_version.yml
@@ -66,7 +66,7 @@ jobs:
           echo "::set-output name=new_branch::bump-rasa-x-version-to-${LATEST_RASA_X_MINOR}-${GITHUB_SHA:0:7}"
 
       - name: Create new branch 🐣
-        uses: peterjgrainger/action-create-branch@v2.0.1
+        uses: peterjgrainger/action-create-branch@08259812c8ebdbf1973747f9297e332fa078d3c1
         if: env.CREATE_UPDATE_PR == 'true'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -89,7 +89,7 @@ jobs:
           git push origin ${{ steps.get-branch-name.outputs.new_branch }}
 
       - name: Open pull request ☄️
-        uses: repo-sync/pull-request@v2
+        uses: repo-sync/pull-request@1b6c62644f972d1a4cf98835ed1efe728d7497a8
         if: env.CREATE_UPDATE_PR == 'true'
         with:
           github_token:  ${{ secrets.GITHUB_TOKEN }}