diff --git a/.github/workflows/benchmark-go.yml b/.github/workflows/benchmark-go.yml
index 902cf2ca..0f24458d 100644
--- a/.github/workflows/benchmark-go.yml
+++ b/.github/workflows/benchmark-go.yml
@@ -19,10 +19,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Fetch Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.1.0
         with:
           go-version-file: go.mod
 
@@ -30,7 +30,7 @@ jobs:
         run: set -o pipefail; go test ./... -benchmem -run=^$ -bench . | tee output.txt
 
       - name: Store benchmark result
-        uses: benchmark-action/github-action-benchmark@v1.20.4
+        uses: benchmark-action/github-action-benchmark@d48d326b4ca9ba73ca0cd0d59f108f9e02a381c7 # v1.20.4
         with:
           tool: 'go'
           output-file-path: output.txt