diff --git a/.github/actions/finalize/action.yml b/.github/actions/finalize/action.yml
index dac36676..3cee8fff 100644
--- a/.github/actions/finalize/action.yml
+++ b/.github/actions/finalize/action.yml
@@ -13,7 +13,7 @@ inputs:
 runs:
   using: 'composite'
   steps:
-    - uses: balena-io/deploy-to-balena-action@v1.0.3
+    - uses: balena-io/deploy-to-balena-action@12296358299d02b4516de8e2130310573e63f294 # v2.0.27
       with:
         balena_token: ${{ fromJSON(inputs.secrets).BALENA_STAGING_TOKEN }}
         fleet: ${{ env.matrix_value }}
diff --git a/.github/actions/publish/action.yml b/.github/actions/publish/action.yml
index a46793ea..0005845a 100644
--- a/.github/actions/publish/action.yml
+++ b/.github/actions/publish/action.yml
@@ -13,7 +13,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: balena-io/deploy-to-balena-action@v1.0.3
+    - uses: balena-io/deploy-to-balena-action@12296358299d02b4516de8e2130310573e63f294 # v2.0.27
       with:
         balena_token: ${{ fromJSON(inputs.secrets).BALENA_STAGING_TOKEN }}
         fleet: ${{ env.matrix_value }}