diff --git a/.github/workflows/_03_release_checks.yml b/.github/workflows/_03_release_checks.yml
index 84a5f3fe47..44c55e94b9 100644
--- a/.github/workflows/_03_release_checks.yml
+++ b/.github/workflows/_03_release_checks.yml
@@ -27,10 +27,9 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Rust 🦀
-        uses: actions-rs/toolchain@b2417cde72dcf67f306c0ae8e0828a81bf0b189f
+        uses: dtolnay/rust-toolchain@7b1c307e0dcbda6122208f10795a713336a9b35a
         with:
           toolchain: stable
-          override: true
 
       - name: Extract version from Cargo.toml 🌽
         id: cargo
diff --git a/.github/workflows/_11_coverage.yml b/.github/workflows/_11_coverage.yml
index ebdc2f99db..7d307d9a0c 100644
--- a/.github/workflows/_11_coverage.yml
+++ b/.github/workflows/_11_coverage.yml
@@ -46,7 +46,7 @@ jobs:
         run: cargo llvm-cov --lib --features ${{ inputs.test_features}} --workspace --codecov --output-path lcov.info
 
       - name: Upload coverage to Codecov 📊
-        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
         with:
           token: ${{ secrets.CF_BACKEND_CODECOV_TOKEN }} # not required for public repos
           files: lcov.info
diff --git a/.github/workflows/upgrade-test.yml b/.github/workflows/upgrade-test.yml
index 6f2ca7562a..a97f7ecfb3 100644
--- a/.github/workflows/upgrade-test.yml
+++ b/.github/workflows/upgrade-test.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Download try-runtime binary 📥
         if: inputs.run-job
-        uses: jaxxstorm/action-install-gh-release@v1.10.0
+        uses: jaxxstorm/action-install-gh-release@25d5e2dd555cd74f1fab9ac1e6ea117acde2c0c4
         with:
           repo: paritytech/try-runtime-cli
           tag: v0.7.0