diff --git a/.github/workflows/build-cucumber.yml b/.github/workflows/build-cucumber.yml
index 9dc221ef5c5..a06bb1f614a 100644
--- a/.github/workflows/build-cucumber.yml
+++ b/.github/workflows/build-cucumber.yml
@@ -23,7 +23,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 1e208328754..6cb90883419 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -34,7 +34,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-documentation.yml b/.github/workflows/build-documentation.yml
index 84c24bd224c..0ff81b4eadc 100644
--- a/.github/workflows/build-documentation.yml
+++ b/.github/workflows/build-documentation.yml
@@ -16,7 +16,7 @@ jobs:
           java-version: '21'
           distribution: 'zulu'
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-e2e-tests.yml b/.github/workflows/build-e2e-tests.yml
index 94c9cf4d86c..b5fbb7821c5 100644
--- a/.github/workflows/build-e2e-tests.yml
+++ b/.github/workflows/build-e2e-tests.yml
@@ -40,7 +40,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-mariadb.yml b/.github/workflows/build-mariadb.yml
index 66237757c2e..9601eac41a0 100644
--- a/.github/workflows/build-mariadb.yml
+++ b/.github/workflows/build-mariadb.yml
@@ -51,7 +51,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-mysql.yml b/.github/workflows/build-mysql.yml
index 1d8f874f4bd..8e03709813e 100644
--- a/.github/workflows/build-mysql.yml
+++ b/.github/workflows/build-mysql.yml
@@ -51,7 +51,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-postgresql.yml b/.github/workflows/build-postgresql.yml
index 2a6e222039b..fb8dffc083c 100644
--- a/.github/workflows/build-postgresql.yml
+++ b/.github/workflows/build-postgresql.yml
@@ -52,7 +52,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-progressive-loan.yml b/.github/workflows/build-progressive-loan.yml
index b9addbdaa3c..408c574093c 100644
--- a/.github/workflows/build-progressive-loan.yml
+++ b/.github/workflows/build-progressive-loan.yml
@@ -23,7 +23,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/build-quality-checks.yml b/.github/workflows/build-quality-checks.yml
index 56778b274af..23c7de04557 100644
--- a/.github/workflows/build-quality-checks.yml
+++ b/.github/workflows/build-quality-checks.yml
@@ -23,7 +23,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
@@ -64,7 +64,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
@@ -105,7 +105,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
@@ -146,7 +146,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
@@ -187,7 +187,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/liquibase-only-postgresql.yml b/.github/workflows/liquibase-only-postgresql.yml
index cd5d1b47609..16fb2eeb3a2 100644
--- a/.github/workflows/liquibase-only-postgresql.yml
+++ b/.github/workflows/liquibase-only-postgresql.yml
@@ -33,7 +33,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/publish-dockerhub.yml b/.github/workflows/publish-dockerhub.yml
index e610bdcb1ee..f4748801f59 100644
--- a/.github/workflows/publish-dockerhub.yml
+++ b/.github/workflows/publish-dockerhub.yml
@@ -18,7 +18,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/run-integration-test-sequentially-postgresql.yml b/.github/workflows/run-integration-test-sequentially-postgresql.yml
index 0b601254456..692ebb4808f 100644
--- a/.github/workflows/run-integration-test-sequentially-postgresql.yml
+++ b/.github/workflows/run-integration-test-sequentially-postgresql.yml
@@ -36,7 +36,7 @@ jobs:
           java-version: '21'
           distribution: 'zulu'
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/smoke-messaging.yml b/.github/workflows/smoke-messaging.yml
index 14c9b7f25f0..458e8e591dd 100644
--- a/.github/workflows/smoke-messaging.yml
+++ b/.github/workflows/smoke-messaging.yml
@@ -32,7 +32,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
index c42e6e173d9..f237e8baaf9 100644
--- a/.github/workflows/sonarqube.yml
+++ b/.github/workflows/sonarqube.yml
@@ -24,7 +24,7 @@ jobs:
           java-version: '21'
           distribution: 'zulu'
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/verify-api-backward-compatibility.yml b/.github/workflows/verify-api-backward-compatibility.yml
index 03c1cb47677..1a4198070e7 100644
--- a/.github/workflows/verify-api-backward-compatibility.yml
+++ b/.github/workflows/verify-api-backward-compatibility.yml
@@ -50,7 +50,7 @@ jobs:
           java-version: '21'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .
diff --git a/.github/workflows/verify-liquibase-backward-compatibility.yml b/.github/workflows/verify-liquibase-backward-compatibility.yml
index d945253229b..4177b0cf89e 100644
--- a/.github/workflows/verify-liquibase-backward-compatibility.yml
+++ b/.github/workflows/verify-liquibase-backward-compatibility.yml
@@ -48,7 +48,7 @@ jobs:
           java-version: '21'
 
       - name: Download workspace
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: fineract-workspace-${{ github.run_id }}
           path: .