diff --git a/.github/workflows/flux-hr-sync.yaml b/.github/workflows/flux-hr-sync.yaml
index 52f5ac3c97..5d45b26a5e 100644
--- a/.github/workflows/flux-hr-sync.yaml
+++ b/.github/workflows/flux-hr-sync.yaml
@@ -32,7 +32,7 @@ jobs:
 
       - name: Cache Workflow Tools
         id: cache-workflow-tools
-        uses: actions/cache@v3
+        uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: /home/linuxbrew/.linuxbrew
           key: homebrew-v0-${{ runner.os }}-${{ runner.arch }}
diff --git a/.github/workflows/flux-image-test.yaml b/.github/workflows/flux-image-test.yaml
index 565afac225..f9ea71798f 100644
--- a/.github/workflows/flux-image-test.yaml
+++ b/.github/workflows/flux-image-test.yaml
@@ -34,7 +34,7 @@ jobs:
 
       - name: Cache Workflow Tools
         id: cache-workflow-tools
-        uses: actions/cache@v3
+        uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: /home/linuxbrew/.linuxbrew
           key: homebrew-v0-${{ runner.os }}-${{ runner.arch }}
diff --git a/.github/workflows/publish-terraform.yaml b/.github/workflows/publish-terraform.yaml
index 5138763105..75b439a299 100644
--- a/.github/workflows/publish-terraform.yaml
+++ b/.github/workflows/publish-terraform.yaml
@@ -30,7 +30,7 @@ jobs:
 
       - name: Cache Workflow Tools
         id: cache-workflow-tools
-        uses: actions/cache@v3
+        uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: /home/linuxbrew/.linuxbrew
           key: homebrew-v0-${{ runner.os }}-${{ runner.arch }}