diff --git a/.github/workflows/publish-devfile-schema.yaml b/.github/workflows/publish-devfile-schema.yaml
index f2321e547..8f206829c 100644
--- a/.github/workflows/publish-devfile-schema.yaml
+++ b/.github/workflows/publish-devfile-schema.yaml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.9'
 
diff --git a/.github/workflows/release-devfile-schema.yaml b/.github/workflows/release-devfile-schema.yaml
index fd77c2a58..c55470198 100644
--- a/.github/workflows/release-devfile-schema.yaml
+++ b/.github/workflows/release-devfile-schema.yaml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.9'