diff --git a/templates/bun-npm-package/.github/workflows/ci.yml b/templates/bun-npm-package/.github/workflows/ci.yml
index ad2bf36..1ab5cca 100644
--- a/templates/bun-npm-package/.github/workflows/ci.yml
+++ b/templates/bun-npm-package/.github/workflows/ci.yml
@@ -13,9 +13,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Setup tools
-        uses: jdx/mise-action@v2
+        uses: jdx/mise-action@d6e32c1796099e0f1f3ac741c220a8b7eae9e5dd # v2
       - name: Install dependencies
         run: bun install --frozen-lockfile
       - name: Run formatter, linter and import sorting with Biome
@@ -25,9 +25,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Setup tools
-        uses: jdx/mise-action@v2
+        uses: jdx/mise-action@d6e32c1796099e0f1f3ac741c220a8b7eae9e5dd # v2
       - name: Install dependencies
         run: bun install --frozen-lockfile
       - name: Run formatter, linter and import sorting with Biome
@@ -37,9 +37,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Setup tools
-        uses: jdx/mise-action@v2
+        uses: jdx/mise-action@d6e32c1796099e0f1f3ac741c220a8b7eae9e5dd # v2
       - name: Install dependencies
         run: bun install --frozen-lockfile
       - name: Build
diff --git a/templates/bun-npm-package/.github/workflows/release.yml b/templates/bun-npm-package/.github/workflows/release.yml
index 3f5db62..055d424 100644
--- a/templates/bun-npm-package/.github/workflows/release.yml
+++ b/templates/bun-npm-package/.github/workflows/release.yml
@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: Setup tools
-        uses: jdx/mise-action@v2
+        uses: jdx/mise-action@d6e32c1796099e0f1f3ac741c220a8b7eae9e5dd # v2
 
       - name: Create .npmrc
         run: |