diff --git a/.github/workflows/rebuild.yml b/.github/workflows/rebuild.yml
index 0211da4..0463138 100644
--- a/.github/workflows/rebuild.yml
+++ b/.github/workflows/rebuild.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: dtolnay/rust-toolchain@master
         with:
           # The pinned nightly of Ariel OS v0.4.0
@@ -27,11 +27,12 @@ jobs:
           mkdir -p build/imports/ariel-os
           touch build/imports/ariel-os/ariel-os-cargo.toml
 
-      - uses: taiki-e/install-action@v1
+      - name: Install wasm-tools
+        uses: taiki-e/install-action@74e87cbfa15a59692b158178d8905a61bf6fca95 # v2
         with:
-          tool: wasm-tools
+          tool: wasm-tools@1.246.0
       - run: ./rebuild-all-payloads.sh
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           path: examples/*/*.cwasm
       - run: git diff --exit-code