diff --git a/.github/workflows/build-container.yml b/.github/workflows/build-container.yml
index afea671..7d7c795 100644
--- a/.github/workflows/build-container.yml
+++ b/.github/workflows/build-container.yml
@@ -42,7 +42,7 @@ jobs:
     needs: make-date-tag
     steps:
     - name: checkout docker-software-base
-      uses: actions/checkout@v3
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - id: generate-tag-list
       env:
@@ -67,24 +67,24 @@ jobs:
         echo "taglist=${tag_list}" >> $GITHUB_OUTPUT
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v2.7.0
+      uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
     - name: Log in to Docker Hub
       if: ${{ !env.ACT }} # Only runs this task when not executing with act
-      uses: docker/login-action@v2.2.0
+      uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
       with:
         username: ${{ secrets.DOCKER_USERNAME }}
         password: ${{ secrets.DOCKER_PASSWORD }}
         
     - name: Log in to OSG Harbor
-      uses: docker/login-action@v2.2.0
+      uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
       with:
         registry: hub.opensciencegrid.org
         username: ${{ secrets.OSG_HARBOR_ROBOT_USER }}
         password: ${{ secrets.OSG_HARBOR_ROBOT_PASSWORD }}
 
     - name: Build and push Docker images
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
       continue-on-error: ${{ matrix.repo == 'development' && (matrix.series == '24')}}
       with:
         context: .
@@ -115,7 +115,7 @@ jobs:
     steps:
 
     - name: dispatch build ${{ matrix.dispatch-repo }}
-      uses: peter-evans/repository-dispatch@v2
+      uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
       with:
         token: ${{ secrets.REPO_ACCESS_TOKEN }}
         repository: opensciencegrid/${{ matrix.dispatch-repo }}