diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 011ced0f..2e64d7fc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
         with:
           fetch-depth: 0
 
@@ -26,12 +26,12 @@ jobs:
         with:
           version: 8
       # Cache node_modules
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 20
           cache: 'pnpm'
       - run: pnpm install --frozen-lockfile
-      - uses: nrwl/nx-set-shas@v4
+      - uses: nrwl/nx-set-shas@76907e7e5d3cd17ddb5e2b123389f054bffcdd03 # v4
 
       - run: git branch --track main origin/main
         if: ${{ github.event_name == 'pull_request' }}
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index c7de9032..c1a01543 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/dte-ci.yml b/.github/workflows/dte-ci.yml
index fbff84c9..b2c5309c 100644
--- a/.github/workflows/dte-ci.yml
+++ b/.github/workflows/dte-ci.yml
@@ -14,7 +14,7 @@ permissions:
 jobs:
   main:
     name: Nx Cloud - Main Job
-    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@v0.14.0
+    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@81f119483401ffde8275edf4c089b42e24b92cf4 # v0.14.0
     with:
       main-branch-name: main
       number-of-agents: 3
@@ -29,6 +29,6 @@ jobs:
 
   agents:
     name: Nx Cloud - Agents
-    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@v0.14.0
+    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@81f119483401ffde8275edf4c089b42e24b92cf4 # v0.14.0
     with:
       number-of-agents: 3
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 32784232..5ba20936 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,12 +19,12 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
         with:
           fetch-depth: 0
 
       - name: Install Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 20
           registry-url: https://registry.npmjs.org/
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 974a8e8c..4a83ff5c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -6,7 +6,7 @@ stages:
   - build
 
 default:
-  image: node:20.12
+  image: node:20.12@sha256:ec31b4e7762901e0a1cbf5a82ffd66c9798057c50f1b6f33a0089cf0bbbcffed
 
 variables:
   CI: 'true'
diff --git a/package.json b/package.json
index 13e51b02..371e9abe 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "@nx/workspace": "18.3.3",
     "@prisma/client": "5.12.1",
     "@swc-node/register": "1.8.0",
-    "@swc/cli": "~0.1.62",
+    "@swc/cli": "0.1.65",
     "@swc/core": "1.3.95",
     "@types/jest": "29.5.6",
     "@types/node": "18.19.31",
@@ -68,10 +68,10 @@
     "prettier": "2.8.8",
     "ts-jest": "29.1.1",
     "ts-node": "10.9.2",
-    "tsx": "^4.7.2",
+    "tsx": "4.7.2",
     "typescript": "5.4.3",
     "validate-branch-name": "1.3.0",
-    "verdaccio": "^5.27.0"
+    "verdaccio": "5.30.3"
   },
   "packageManager": "pnpm@8.15.7+sha256.50783dd0fa303852de2dd1557cd4b9f07cb5b018154a6e76d0f40635d6cee019",
   "nx": {
diff --git a/packages/nx-container/tests/Dockerfile b/packages/nx-container/tests/Dockerfile
index 4470dcef..f6a7dfac 100644
--- a/packages/nx-container/tests/Dockerfile
+++ b/packages/nx-container/tests/Dockerfile
@@ -1,3 +1,3 @@
-FROM alpine
+FROM alpine@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 
 RUN echo "Hello world!"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5bf8bfd9..49707e38 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -101,7 +101,7 @@ devDependencies:
     specifier: 1.8.0
     version: 1.8.0(@swc/core@1.3.95)(@swc/types@0.1.6)(typescript@5.4.3)
   '@swc/cli':
-    specifier: ~0.1.62
+    specifier: 0.1.65
     version: 0.1.65(@swc/core@1.3.95)
   '@swc/core':
     specifier: 1.3.95
@@ -167,7 +167,7 @@ devDependencies:
     specifier: 10.9.2
     version: 10.9.2(@swc/core@1.3.95)(@types/node@18.19.31)(typescript@5.4.3)
   tsx:
-    specifier: ^4.7.2
+    specifier: 4.7.2
     version: 4.7.2
   typescript:
     specifier: 5.4.3
@@ -176,7 +176,7 @@ devDependencies:
     specifier: 1.3.0
     version: 1.3.0
   verdaccio:
-    specifier: ^5.27.0
+    specifier: 5.30.3
     version: 5.30.3(typanion@3.14.0)
 
 packages: