diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index 5786299..4ee8b4e 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -15,10 +15,10 @@ jobs:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.2
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@094c4c7b0f3ac0ac6129cfb00faea70ea6e13539 # 0.1.2
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.0.1
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@b569618421849422c55d9211f68d35aad4c65734 # 0.0.1
         with:
           tag: ${{ steps.tag.outputs.new-tag }}
diff --git a/.gitea/workflows/prerelease.yaml b/.gitea/workflows/prerelease.yaml
index a7399aa..f903780 100644
--- a/.gitea/workflows/prerelease.yaml
+++ b/.gitea/workflows/prerelease.yaml
@@ -13,11 +13,11 @@ jobs:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.2
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@094c4c7b0f3ac0ac6129cfb00faea70ea6e13539 # 0.1.2
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: true
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.0.1
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@b569618421849422c55d9211f68d35aad4c65734 # 0.0.1
         with:
           tag: ${{ steps.tag.outputs.new-tag }}