diff --git a/.github/workflows/cleanup-old-maven-pkgs.yml b/.github/workflows/cleanup-old-maven-pkgs.yml
index 9b2c6fa..ed6c60f 100644
--- a/.github/workflows/cleanup-old-maven-pkgs.yml
+++ b/.github/workflows/cleanup-old-maven-pkgs.yml
@@ -43,7 +43,7 @@ jobs:
             echo "**Dry-run**: ${{ github.event.inputs.dry-run || 'false' }}"
             echo "**Debug**: ${{ github.event.inputs.debug || 'false' }}"
         - name: Run Maven Cleanup Action
-          uses: netcracker/qubership-workflow-hub/actions/container-package-cleanup@v2.1.1
+          uses: netcracker/qubership-workflow-hub/actions/container-package-cleanup@6a2de8d62ac5b6998e30f923613c998c263ea9f2 # v2.2.2
           with:
             threshold-days: ${{ github.event.inputs.threshold-days || 14 }}
             included-patterns: ${{ github.event.inputs.included-patterns || '*SNAPSHOT*' }}
diff --git a/.github/workflows/link-checker.yaml b/.github/workflows/link-checker.yaml
index 70d9f78..5cf1dba 100644
--- a/.github/workflows/link-checker.yaml
+++ b/.github/workflows/link-checker.yaml
@@ -15,10 +15,10 @@ jobs:
   linkChecker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Restore lychee cache
-        uses: actions/cache@v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         id: restore-cache
         with:
           path: .lycheecache
@@ -27,7 +27,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@v2
+        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2
         with:
           args: >-
             './**/*.md'
diff --git a/.github/workflows/maven-deploy.yml b/.github/workflows/maven-deploy.yml
index 070effa..b0b769f 100644
--- a/.github/workflows/maven-deploy.yml
+++ b/.github/workflows/maven-deploy.yml
@@ -30,7 +30,7 @@ on:
 jobs:
   maven-deploy:
     name: Maven deploy
-    uses: Netcracker/qubership-core-infra/.github/workflows/generic-maven-build.yaml@v2.2.0
+    uses: Netcracker/qubership-core-infra/.github/workflows/generic-maven-build.yaml@bc2a0bd082147e23b4091616c608a21cc2957728 # v2.4.1
     with:
       maven-command: 'deploy'
       sonar-project-key: ${{ vars.SONAR_PROJECT_KEY }}
diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml
index f8d442f..f95446e 100644
--- a/.github/workflows/maven-verify.yml
+++ b/.github/workflows/maven-verify.yml
@@ -22,7 +22,7 @@ on:
 jobs:
   maven-verify:
     name: Maven verify
-    uses: Netcracker/qubership-core-infra/.github/workflows/generic-maven-build.yaml@v2.2.0
+    uses: Netcracker/qubership-core-infra/.github/workflows/generic-maven-build.yaml@bc2a0bd082147e23b4091616c608a21cc2957728 # v2.4.1
     with:
       maven-command: 'verify'
       sonar-project-key: ${{ vars.SONAR_PROJECT_KEY }}
diff --git a/.github/workflows/pr-assigner.yml b/.github/workflows/pr-assigner.yml
index 97a0bc3..cb05946 100644
--- a/.github/workflows/pr-assigner.yml
+++ b/.github/workflows/pr-assigner.yml
@@ -22,10 +22,10 @@ jobs:
             exit 0
           fi
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
 
-      - uses: netcracker/qubership-workflow-hub/actions/pr-assigner@5edd67e98d2f0eec5ab77b4deca0e1d481137462 # 2.1.1
+      - uses: netcracker/qubership-workflow-hub/actions/pr-assigner@6a2de8d62ac5b6998e30f923613c998c263ea9f2 # v2.2.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/pr-conventional-commits.yaml b/.github/workflows/pr-conventional-commits.yaml
index 09849d2..e84d3ff 100644
--- a/.github/workflows/pr-conventional-commits.yaml
+++ b/.github/workflows/pr-conventional-commits.yaml
@@ -20,4 +20,4 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: webiny/action-conventional-commits@faccb24fc2550dd15c0390d944379d2d8ed9690e # v1.3.1
+      - uses: webiny/action-conventional-commits@7f91b1595ca1951cdb671ddc9f07a49081ec5b69 # v1.4.2
diff --git a/.github/workflows/profanity-filter.yml b/.github/workflows/profanity-filter.yml
index 1ed41ba..d7aed0f 100644
--- a/.github/workflows/profanity-filter.yml
+++ b/.github/workflows/profanity-filter.yml
@@ -15,4 +15,4 @@ permissions:
 
 jobs:
   call-apply-filter:
-    uses: Netcracker/qubership-workflow-hub/.github/workflows/profanityFilter.yaml@main
+    uses: Netcracker/qubership-workflow-hub/.github/workflows/profanityFilter.yaml@fd44c0a89c487d71e7c72fe34e9aa57affc8aac6 # main