diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 710240b..5654470 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -7,12 +7,12 @@ jobs:
     runs-on: ubuntu-latest
     # Basic setup for Python
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
       - name: Set up Python 3.10
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: '3.9'
-      - uses: anchore/sbom-action@v0
+      - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0
         with:
           path: .
           output-file: ./bom.json
@@ -20,7 +20,7 @@ jobs:
           format: cyclonedx-json
       # Transmit a copy of our generated SBOM to Manifest
       - name: Transmit generated SBOM to Manifest
-        uses: manifest-cyber/manifest-github-action@main
+        uses: manifest-cyber/manifest-github-action@6bf8917b77e9d721d7971dfae955b968ab3bd817 # main
         id: transmit
         with:
           # Generate an API key at https://app.manifestcyber.com/organization