diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index dc548df9..6998f622 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -16,23 +16,17 @@ jobs:
         shell: sh
 
     steps:
-      - if: ${{ env.ACT }}
-        name: Hack container for local development
-        run: |
-            curl -fsSL https://deb.nodesource.com/setup_12.x | sudo -E bash -
-            sudo apt-get install -y nodejs
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: ${{ matrix.python-version }}
       - name: Set Up Poetry
-        uses: abatilo/actions-poetry@v3
+        uses: abatilo/actions-poetry@7b6d33e44b4f08d7021a1dee3c044e9c253d6439 # v3.0.0
         with:
           poetry-version: 1.3.1
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
           poetry install --sync -v
           mkdir .mypy_cache
       - name: Checking if imports are sorted correctly
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e53c80e4..58975b69 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,18 +15,13 @@ jobs:
       run:
         shell: bash
     steps:
-      - if: ${{ env.ACT }}
-        name: Hack container for local development
-        run: |
-          curl -fsSL https://deb.nodesource.com/setup_12.x | sudo -E bash -
-          sudo apt-get install -y nodejs
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: 3.8
       - name: Set Up Poetry
-        uses: abatilo/actions-poetry@v3
+        uses: abatilo/actions-poetry@7b6d33e44b4f08d7021a1dee3c044e9c253d6439 # v3.0.0
         with:
           poetry-version: 1.3.1
       - name: Publish catalystwan
diff --git a/.github/workflows/unittests.yml b/.github/workflows/unittests.yml
index c79728d3..221330ae 100644
--- a/.github/workflows/unittests.yml
+++ b/.github/workflows/unittests.yml
@@ -16,18 +16,13 @@ jobs:
         shell: bash
 
     steps:
-      - if: ${{ env.ACT }}
-        name: Hack container for local development
-        run: |
-            curl -fsSL https://deb.nodesource.com/setup_12.x | sudo -E bash -
-            sudo apt-get install -y nodejs
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: ${{ matrix.python-version }}
       - name: Set Up Poetry
-        uses: abatilo/actions-poetry@v3
+        uses: abatilo/actions-poetry@7b6d33e44b4f08d7021a1dee3c044e9c253d6439 # v3.0.0
         with:
           poetry-version: 1.3.1
       - name: Install dependencies