diff --git a/.github/workflows/check-script-diff.yml b/.github/workflows/check-script-diff.yml
index 40552874ef..01e75bdab1 100644
--- a/.github/workflows/check-script-diff.yml
+++ b/.github/workflows/check-script-diff.yml
@@ -17,7 +17,7 @@ jobs:
         runs-on: ubuntu-latest
         
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
               with:
                 fetch-depth: 0  # Fetch full history so merge base can be found
               
@@ -44,7 +44,7 @@ jobs:
                 done < changed_manifests.txt
 
             - name: Comment on PR
-              uses: actions/github-script@v7
+              uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
               with:
                 script: |
                   const fs = require('fs');