diff --git a/.github/workflows/check-for-ab-number.yml b/.github/workflows/check-for-ab-number.yml
index ba96951..afd6e8b 100644
--- a/.github/workflows/check-for-ab-number.yml
+++ b/.github/workflows/check-for-ab-number.yml
@@ -13,7 +13,7 @@ jobs:
     name: Check Commit Message  
     runs-on: ubuntu-latest
     steps:
-      - uses: gsactions/commit-message-checker@v2
+      - uses: gsactions/commit-message-checker@16fa2d5de096ae0d35626443bcd24f1e756cafee
         with:
           pattern: 'AB#\d+'
           error: 'Commit messages must contain a valid Azure DevOps work item ID (e.g., AB#123).'
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d5913a7..cf78231 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -45,7 +45,7 @@ jobs:
         run: dotnet test --no-build --verbosity normal --configuration Release /p:CollectCoverage=true /p:Threshold=50 /p:ThresholdType=line /p:ThresholdStat=Average /p:CoverletOutputFormat=opencover /p:CoverletOutput=./TestResults/ /p:ExcludeByAttribute="GeneratedCodeAttribute"
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 
@@ -81,4 +81,6 @@ jobs:
       - name: Publish to GitHub Packages
         run: |
           dotnet pack --configuration Release --no-build -o ./nupkg
-          dotnet nuget push ./nupkg/*.nupkg --skip-duplicate --api-key ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
+          dotnet nuget push ./nupkg/*.nupkg --skip-duplicate --api-key ${{ env.GITHUB_TOKEN }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b36d685..0ef93d2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,7 +43,7 @@ jobs:
         run: dotnet test --no-build --verbosity normal --configuration Release /p:CollectCoverage=true /p:Threshold=50 /p:ThresholdType=line /p:ThresholdStat=Average /p:CoverletOutputFormat=opencover /p:CoverletOutput=./TestResults/ /p:ExcludeByAttribute="GeneratedCodeAttribute"
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 
@@ -72,7 +72,7 @@ jobs:
           NUGET_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: NuGet login
-        uses: NuGet/login@v1
+        uses: NuGet/login@d22cc5f58ff5b88bf9bd452535b4335137e24544
         id: nuget_login
         with:
           user: ${{ secrets.NUGET_USER }}
@@ -86,7 +86,8 @@ jobs:
       - name: Publish Packages
         run: |
           dotnet pack --configuration Release --no-build -o ./nupkg
-          dotnet nuget push ./nupkg/*.nupkg --skip-duplicate --api-key ${{ secrets.GITHUB_TOKEN }}
+          dotnet nuget push ./nupkg/*.nupkg --skip-duplicate --api-key ${{ env.GITHUB_TOKEN }}
           dotnet nuget push ./nupkg/*.nupkg --skip-duplicate --source ${{ env.NUGET_URL }} --api-key ${{ steps.nuget_login.outputs.NUGET_API_KEY }}
         env:
           NUGET_URL: 'https://api.nuget.org/v3/index.json'
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}