diff --git a/.github/workflows/build_qemu.yml b/.github/workflows/build_qemu.yml
index e1b4b0ea8d..779201b796 100644
--- a/.github/workflows/build_qemu.yml
+++ b/.github/workflows/build_qemu.yml
@@ -36,10 +36,10 @@ jobs:
           #   distro: jessie
 
     steps:
-      - uses: actions/checkout@v2.1.0
+      - uses: actions/checkout@01aecccf739ca6ff86c0539fbc67a7a5007bbc81 # v2.1.0
 
       - name: Run on architecture
-        uses: uraimo/run-on-arch-action@v2.4.0
+        uses: uraimo/run-on-arch-action@b101fffede73ba1ed3cc0ca4425cbf61e2672e6e # v2.4.0
         with:
           arch: ${{ matrix.arch }}
           distro: ${{ matrix.distro }}