diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a0b5ec4..915492d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,3 +6,5 @@ updates:
     interval: daily
     time: "04:00"
     timezone: Asia/Calcutta
+  cooldown:
+    default-days: 7
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bd27136..9302842 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,9 +13,9 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26  # v3
       - name: Set up Python 3
-        uses: actions/setup-python@v3
+        uses: actions/setup-python@3542bca2639a428e1796aaa6a2ffef0c0f575566  # v3
         with:
           python-version: "3.10"  
       - name: Install dependencies
@@ -27,7 +27,7 @@ jobs:
           python -m twine check dist/*
           
       - name: 'Upload Artifact'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
         with:
           name: dist
           path: dist/          
@@ -36,9 +36,9 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26  # v3
       - name: Set up Python 3
-        uses: actions/setup-python@v3
+        uses: actions/setup-python@3542bca2639a428e1796aaa6a2ffef0c0f575566  # v3
         with:
           python-version: "3.10"
       - name: Install dependencies
@@ -52,21 +52,21 @@ jobs:
           python -m coverage run -m unittest
           python -m coverage xml
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457  # v3
         
   publish:
     if: startsWith(github.ref, 'refs/tags/v')
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e  # v2
       - name: Download all workflow run artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4
         with:
           name: dist
           path: dist      
       - name: Set up Python 3
-        uses: actions/setup-python@v3
+        uses: actions/setup-python@3542bca2639a428e1796aaa6a2ffef0c0f575566  # v3
         with:
           python-version: "3.10"
       - name: Publish packages to PyPi
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index e3ea46d..7e8dc5e 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -20,9 +20,9 @@ jobs:
         python-version: [3, 3.5, 3.6, 3.7, 3.8, 3.9, 3.10]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e  # v2
     - name: Set up Python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e  # v2
     - name: Install dependencies
       run: |
         pip install setuptools