diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 531768812..261a64966 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -78,8 +78,8 @@ jobs:
     continue-on-error: ${{ matrix.checks == 'advisories' }}
 
     steps:
-    - uses: actions/checkout@v2
-    - uses: EmbarkStudios/cargo-deny-action@v1
+    - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2
+    - uses: EmbarkStudios/cargo-deny-action@v7257a18a9c2fe3f92b85d41ae473520dff953c97 # v1.3.2
       with:
         command: check ${{ matrix.checks }}