diff --git a/.github/workflows/catalog-test.yaml b/.github/workflows/catalog-test.yaml
index 4ae65369dde..f998b326945 100644
--- a/.github/workflows/catalog-test.yaml
+++ b/.github/workflows/catalog-test.yaml
@@ -15,7 +15,7 @@ jobs:
     name: Test SCALE Catalog
     runs-on: ubuntu-latest
     container:
-      image: tccr.io/tccr/devcontainer:v4.0.0
+      image: tccr.io/tccr/devcontainer:v4.0.0@sha256:32429df132dddb24ecffc073b1cc3c1b16294bda1d04acef7c87d0ece155a7ab
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
diff --git a/.github/workflows/charts-lint.yaml b/.github/workflows/charts-lint.yaml
index 4efc9cd0628..c380552828d 100644
--- a/.github/workflows/charts-lint.yaml
+++ b/.github/workflows/charts-lint.yaml
@@ -115,7 +115,7 @@ jobs:
       - name: Create/Update comment
         if: steps.list-changed.outputs.detected == 'true'
         continue-on-error: true
-        uses: thollander/actions-comment-pull-request@1d3973dc4b8e1399c0620d3f2b1aa5e795465308 # v2
+        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6 # v2
         with:
           filePath: /tmp/lint_result.txt
           comment_tag: lint_results