diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 06019d416..0d3f1e4e5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,11 +11,11 @@ jobs:
   health_check:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         lfs: true
     - name: Set up Python 3
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@39cd14951b4ef949c7f10115dd0357a79e472605 # v5.1.1
     - name: Install FontTools
       run: pip install fonttools pytest
     - name: pytest