diff --git a/.gitea/workflows/weekly.yaml b/.gitea/workflows/weekly.yaml
index 2d58f5a..67332bb 100644
--- a/.gitea/workflows/weekly.yaml
+++ b/.gitea/workflows/weekly.yaml
@@ -12,9 +12,9 @@ jobs:
       - linux_amd64
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
           go-version: "1.23.5"
       - name: Install yq