diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 95d85892d..6a44d39dd 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -164,7 +164,8 @@ jobs:
         echo "dir=$(python -m pip cache dir)" >> "${GITHUB_OUTPUT}"
       shell: bash
     - name: Set up pip cache
-      uses: actions/cache@v4
+      # yamllint disable-line rule:line-length
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57  # v4.2.0
       with:
         path: ${{ steps.pip-cache-dir.outputs.dir }}
         key: >-
@@ -305,7 +306,8 @@ jobs:
       run: >-
         echo "dir=$(python -m pip cache dir)" >> "${GITHUB_OUTPUT}"
     - name: Set up pip cache
-      uses: actions/cache@v4
+      # yamllint disable-line rule:line-length
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57  # v4.2.0
       with:
         path: ${{ steps.pip-cache-dir.outputs.dir }}
         key: >-
diff --git a/.github/workflows/reusable-tox.yml b/.github/workflows/reusable-tox.yml
index 927247149..d3bdb807c 100644
--- a/.github/workflows/reusable-tox.yml
+++ b/.github/workflows/reusable-tox.yml
@@ -180,7 +180,8 @@ jobs:
 
     - name: Cache pre-commit.com virtualenvs
       if: inputs.toxenv == 'pre-commit'
-      uses: actions/cache@v4
+      # yamllint disable-line rule:line-length
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57  # v4.2.0
       with:
         path: ~/.cache/pre-commit
         key: >-
@@ -238,7 +239,8 @@ jobs:
       shell: bash
     - name: Set up pip cache
       if: fromJSON(steps.py-abi.outputs.is-stable-abi)
-      uses: actions/cache@v4
+      # yamllint disable-line rule:line-length
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57  # v4.2.0
       with:
         path: ${{ steps.pip-cache-dir.outputs.dir }}
         key: >-