diff --git a/.github/actions/builds/npm-install/action.yml b/.github/actions/builds/npm-install/action.yml
index 9f3adb4..30cbe6a 100644
--- a/.github/actions/builds/npm-install/action.yml
+++ b/.github/actions/builds/npm-install/action.yml
@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache node_modules
       id: cache
-      uses: actions/cache@v4
+      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
       with:
         path: ./node_modules
         key: modules-${{ hashFiles('package-lock.json') }}
diff --git a/.github/workflows/pr-test.yml b/.github/workflows/pr-test.yml
index 613af2a..ac507e2 100644
--- a/.github/workflows/pr-test.yml
+++ b/.github/workflows/pr-test.yml
@@ -20,7 +20,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: Run unit test
         uses: ./.github/actions/tests/unit-test
diff --git a/package-lock.json b/package-lock.json
index 3f444c1..46b3612 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,7 +13,7 @@
         "uuidv4": "^6.2.10"
       },
       "devDependencies": {
-        "@faker-js/faker": "^6.0.0",
+        "@faker-js/faker": "6.0.0",
         "nx": "19.5.7"
       }
     },
diff --git a/package.json b/package.json
index f55fe40..17ce328 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "uuidv4": "^6.2.10"
   },
   "devDependencies": {
-    "@faker-js/faker": "^6.0.0",
+    "@faker-js/faker": "6.0.0",
     "nx": "19.5.7"
   },
   "nx": {}