diff --git a/.github/workflows/rust.yaml b/.github/workflows/rust.yaml
index 26b563b..35abf87 100644
--- a/.github/workflows/rust.yaml
+++ b/.github/workflows/rust.yaml
@@ -15,35 +15,35 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
           toolchain: stable
           default: true
           components: clippy, rustfmt
 
       - name: Cargo Format
-        uses: actions-rs/cargo@v1
+        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         with:
           command: fmt
           args: --all -- --check
 
       - name: Cargo Clippy
-        uses: actions-rs/cargo@v1
+        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         with:
           command: clippy
 
       - name: Cargo Tarpaulin XML Report
-        uses: actions-rs/tarpaulin@v0.1
+        uses: actions-rs/tarpaulin@044a1e5bdace8dd2f727b1af63c1d9a1d3572068 # v0.1
         with:
           version: '0.19.1'
           out-type: Xml
           args: '--ignore-config --ignore-tests'
 
       - name: Archive Code Coverage Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         with:
           name: code-coverage-report
           path: cobertura.xml
@@ -53,30 +53,30 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Build & optimize WASM
         run: make optimize
 
       - name: Set up Rust toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
           toolchain: stable
           default: true
 
       # Necessary to ensure sufficient permissions for the cargo build output folder
       - name: Clean Cargo
-        uses: actions-rs/cargo@v1
+        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         with:
           command: clean
 
       - name: Build project
-        uses: actions-rs/cargo@v1
+        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         with:
           command: build
 
       - name: Run integration test
-        uses: actions-rs/cargo@v1
+        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         with:
           command: test
           args: >
@@ -93,7 +93,7 @@ jobs:
     if: ${{ github.ref == 'refs/heads/main' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Get Release Version
         run: |
@@ -113,7 +113,7 @@ jobs:
 
       - name: Generate Rust Docs
         if: ${{ !env.TAG_EXISTS }}
-        uses: actions-rs/cargo@v1
+        uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
         with:
           command: doc
           args: --no-deps
@@ -130,7 +130,7 @@ jobs:
 
       - name: Deploy Docs to GitHub Pages
         if: ${{ !env.TAG_EXISTS }}
-        uses: JamesIves/github-pages-deploy-action@v4.2.2
+        uses: JamesIves/github-pages-deploy-action@2731bec0dbf2bbf03977acbe88f9977eb7c2fbb7 # v4.2.2
         with:
           branch: gh-pages
           folder: pages-files
@@ -143,7 +143,7 @@ jobs:
           make optimize
 
       - name: Release WASM
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
         # Only upload a new release if the attempted tag does not yet exist
         if: ${{ !env.TAG_EXISTS }}
         env:
diff --git a/Cargo.toml b/Cargo.toml
index 32c112f..d16dc33 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -49,5 +49,5 @@ uuid = "=1.11.0"
 
 [dev-dependencies]
 provwasm-mocks = { version = "=2.5.0" }
-provwasm-test-tube = "0.2.0"
+provwasm-test-tube = "=0.2.0"
 uuid = { version = "=1.11.0", features = ["v4"] }