diff --git a/plugins/woocommerce-blocks/.github/workflows/bundle-size.yml b/plugins/woocommerce-blocks/.github/workflows/bundle-size.yml
index 642cff21349..86b27b34f92 100644
--- a/plugins/woocommerce-blocks/.github/workflows/bundle-size.yml
+++ b/plugins/woocommerce-blocks/.github/workflows/bundle-size.yml
@@ -13,7 +13,7 @@ jobs:
             - uses: actions/setup-node@v3
               with:
                   node-version-file: '.nvmrc'
-            - uses: preactjs/compressed-size-action@v2
+            - uses: preactjs/compressed-size-action@265b0667736973f2d83b1a35fdc5440d6cb3322e
               with:
                   repo-token: '${{ secrets.GITHUB_TOKEN }}'
                   pattern: '{build/**/*.js,build/**/*.css}'
diff --git a/plugins/woocommerce-blocks/.github/workflows/js-css-md-linting.yml b/plugins/woocommerce-blocks/.github/workflows/js-css-md-linting.yml
index 5285fd1fc98..66ea4ceaab8 100644
--- a/plugins/woocommerce-blocks/.github/workflows/js-css-md-linting.yml
+++ b/plugins/woocommerce-blocks/.github/workflows/js-css-md-linting.yml
@@ -69,7 +69,7 @@ jobs:
                   name: eslint_report.json
                   path: eslint_report.json
             - name: Annotate code linting results
-              uses: ataylorme/eslint-annotate-action@1.2.0
+              uses: ataylorme/eslint-annotate-action@v2
               with:
                   repo-token: '${{ secrets.GITHUB_TOKEN }}'
                   report-json: 'eslint_report.json'
diff --git a/plugins/woocommerce-blocks/.github/workflows/php-js-e2e-tests.yml b/plugins/woocommerce-blocks/.github/workflows/php-js-e2e-tests.yml
index 2c0fc513ca6..b170f25fff1 100644
--- a/plugins/woocommerce-blocks/.github/workflows/php-js-e2e-tests.yml
+++ b/plugins/woocommerce-blocks/.github/workflows/php-js-e2e-tests.yml
@@ -80,7 +80,7 @@ jobs:
                   path: reports/e2e
 
             - name: Archive flaky tests report
-              uses: actions/upload-artifact@e448a9b857ee2131e752b06002bf0e093c65e571 # v2.2.2
+              uses: actions/upload-artifact@v3
               if: always()
               with:
                   name: flaky-tests-report-${{ matrix.part }}