diff --git a/.github/workflows/build-mariadb.yml b/.github/workflows/build-mariadb.yml
index a82822fa6..b887ce48e 100644
--- a/.github/workflows/build-mariadb.yml
+++ b/.github/workflows/build-mariadb.yml
@@ -68,14 +68,14 @@ jobs:
 
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: test-results
           path: integration-tests/build/reports/
 
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: server-logs
           path: integration-tests/build/cargo/
diff --git a/.github/workflows/build-mysql.yml b/.github/workflows/build-mysql.yml
index f78aa5ff3..be6a9c57d 100644
--- a/.github/workflows/build-mysql.yml
+++ b/.github/workflows/build-mysql.yml
@@ -68,14 +68,14 @@ jobs:
 
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: test-results
           path: integration-tests/build/reports/
 
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: server-logs
           path: integration-tests/build/cargo/
diff --git a/.github/workflows/build-postgresql.yml b/.github/workflows/build-postgresql.yml
index 7042c43ac..c14135d61 100644
--- a/.github/workflows/build-postgresql.yml
+++ b/.github/workflows/build-postgresql.yml
@@ -69,14 +69,14 @@ jobs:
 
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: test-results
           path: integration-tests/build/reports/
 
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: server-logs
           path: integration-tests/build/cargo/