diff --git a/.github/actions/sccache-gcloud/action.yml b/.github/actions/sccache-gcloud/action.yml
index cd9b0accfb..ee611db560 100644
--- a/.github/actions/sccache-gcloud/action.yml
+++ b/.github/actions/sccache-gcloud/action.yml
@@ -14,13 +14,13 @@ runs:
 
     - name: Auth gcloud
       id: gauth
-      uses: google-github-actions/auth@35b0e87d162680511bf346c299f71c9c5c379033 # @v1.1.1
+      uses: google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c # @v2.1.2
       with:
         workload_identity_provider: ${{ inputs.GWIP }}
         service_account: ${{ inputs.GSA }}
 
     - name: Run sccache-cache
-      uses: mozilla-actions/sccache-action@8417cffc2ec64127ad83077aceaa8631f7cdc83e #v0.0.3
+      uses: mozilla-actions/sccache-action@2e7f9ec7921547d4b46598398ca573513895d0bd #v0.0.4
 
     - name: set GCS bucket sccache variables
       shell: bash
diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 7b453835ca..f3b624fe8d 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -35,13 +35,13 @@ jobs:
         uses: docker/setup-buildx-action@0d103c3126aa41d772a8362f6aa67afac040f80c #v3.1.0
 
       - name: DockerHub Registry Login
-        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 #v3.1.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
 
       - name: Github Registry login
-        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 #v3.1.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -77,7 +77,7 @@ jobs:
             core.exportVariable('ACTIONS_RUNTIME_TOKEN', process.env.ACTIONS_RUNTIME_TOKEN || '');
 
       - name: Build and push centrifugeio/centrifuge-chain
-        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 #v5.1.0
+        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 #v5.3.0
         with:
           context: .
           file: ./docker/centrifuge-chain/Dockerfile
diff --git a/.github/workflows/build-wasm.yml b/.github/workflows/build-wasm.yml
index e92cfa624f..ee19e6c085 100644
--- a/.github/workflows/build-wasm.yml
+++ b/.github/workflows/build-wasm.yml
@@ -27,7 +27,7 @@ jobs:
     steps:
     # PREP
       - name: Check out code
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab #3.5.2
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b #4.1.4
 
       - name: Prep build on Ubuntu
         uses: ./.github/actions/prep-ubuntu
diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 7d3dad762c..4b572a56c6 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -58,7 +58,7 @@ jobs:
           done
 
       - name: upload Docs files
-        uses: actions/upload-pages-artifact@0252fc4ba7626f0298f0cf00902a25c6afc77fa8 # v3.0
+        uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 #v4.3.0
         with:
           path: ./target/doc
 
diff --git a/.github/workflows/sanity-checks.yml b/.github/workflows/sanity-checks.yml
index bccfd8ab40..9eea1f6e69 100644
--- a/.github/workflows/sanity-checks.yml
+++ b/.github/workflows/sanity-checks.yml
@@ -17,7 +17,7 @@ jobs:
                  lint-fmt, lint-clippy, cargo-build, docs-build, lint-taplo]
     steps:
       - name: Check out code
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab #3.5.2
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b #4.1.4
 
       - name: Prep build
         uses: ./.github/actions/prep-ubuntu
@@ -41,7 +41,7 @@ jobs:
         runtime: [altair, centrifuge]
     steps:
       - name: Check out code
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab #3.5.2
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b #4.1.4
 
       - name: Prep build
         uses: ./.github/actions/prep-ubuntu