diff --git a/.github/workflows/renovate-validation.yaml b/.github/workflows/renovate-validation.yaml
index a68d8f6..2d18aa0 100644
--- a/.github/workflows/renovate-validation.yaml
+++ b/.github/workflows/renovate-validation.yaml
@@ -12,8 +12,8 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: suzuki-shunsuke/github-action-renovate-config-validator@v0.1.2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+      - uses: suzuki-shunsuke/github-action-renovate-config-validator@7ab3d8f19305664925f3e626580f075f14e40386 # v0.1.2
   validate-presets:
     runs-on: ubuntu-latest
     strategy:
@@ -21,7 +21,7 @@ jobs:
         config_file_path:
           - default.json
     steps:
-      - uses: actions/checkout@v2
-      - uses: suzuki-shunsuke/github-action-renovate-config-validator@v0.1.2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+      - uses: suzuki-shunsuke/github-action-renovate-config-validator@7ab3d8f19305664925f3e626580f075f14e40386 # v0.1.2
         with:
           config_file_path: ${{ matrix.config_file_path }}