diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index c3a6c41..db73fb2 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -33,12 +33,12 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           fetch-depth: 0
-      - uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.22
+      - uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@9841c96e72d4fc1ecec620e91e213895341cce86 # 0.1.22
         id: tag
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.1.0
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@8a04fa92474f770e525b1e6dd420b471da15c222 # 0.1.0
         with:
           tag: ${{ steps.tag.outputs.new-tag }}
       - uses: ChristopherHX/gitea-download-artifact@v4