diff --git a/.github/workflows/create_release.yml b/.github/workflows/create_release.yml
index 15b2da8c344..f8088e7e46e 100644
--- a/.github/workflows/create_release.yml
+++ b/.github/workflows/create_release.yml
@@ -34,6 +34,7 @@ jobs:
     uses: ./.github/workflows/release_linux_x86_64.yml
     with:            
       os: "linux_x86_64" 
+    secrets: inherit
 
   call-workflow-ubuntu_aarch64:    
     strategy:
@@ -42,6 +43,7 @@ jobs:
     uses: ./.github/workflows/release_linux_aarch64.yml
     with:            
       os: "linux_aarch64"      
+    secrets: inherit
 
   call-workflow-win:    
     strategy:
@@ -49,7 +51,8 @@ jobs:
         os: ['windows-latest']    
     uses: ./.github/workflows/release_win.yml
     with:      
-      os: "win"      
+      os: "win"
+    secrets: inherit
 
   call-workflow-mac:    
     strategy:
@@ -57,7 +60,8 @@ jobs:
         os: ['mac-latest']    
     uses: ./.github/workflows/release_mac.yml
     with:            
-      os: "macos"   
+      os: "macos"
+    secrets: inherit
 
 
 
@@ -78,7 +82,7 @@ jobs:
 
     steps:
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
         with:
           pattern: wheels* 
           path: dist
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 84d268a1275..749a50de4e0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -58,10 +58,10 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3
         with:
           python-version: ${{ matrix.python_version }}
 
@@ -158,16 +158,16 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: always()
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 
       - name: Upload Test Results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a
         with:
-          name: Test Results (${{ matrix.os }}-{{ matrix.python_version }})
-          path: pytest.xml
+          name: TestResults-(${{ matrix.os }}-${{ matrix.python_version }})
+          path: pytest.xml          
 
       # Note that the test data should be generated with numpy>=2.0.
       # numpy 1.x and numpy 2.0 produce slightly different numerical values.
@@ -219,11 +219,13 @@ jobs:
     if: always()
     steps:
       - name: Download Artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
         with:
           path: artifacts
+          pattern: TestResults*
+          merge-multiple: true
 
       - name: Publish Test Results
-        uses: EnricoMi/publish-unit-test-result-action@v2
+        uses: EnricoMi/publish-unit-test-result-action@567cc7f8dcea3eba5da355f6ebc95663310d8a07
         with:
           files: "artifacts/**/*.xml"
diff --git a/.github/workflows/release_linux_x86_64.yml b/.github/workflows/release_linux_x86_64.yml
index f944f272e10..6a326dbdff8 100644
--- a/.github/workflows/release_linux_x86_64.yml
+++ b/.github/workflows/release_linux_x86_64.yml
@@ -59,7 +59,7 @@ jobs:
         python -m pip install dist/*manylinux2014_x86_64.whl
         pytest
 
-    - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b
+    - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a
       with:
         name: wheels-${{ inputs.os }}-${{ matrix.python-version }}
         path: |
diff --git a/.github/workflows/release_win.yml b/.github/workflows/release_win.yml
index 1d614cecc01..59e617932e5 100644
--- a/.github/workflows/release_win.yml
+++ b/.github/workflows/release_win.yml
@@ -78,7 +78,7 @@ jobs:
         cd onnx
         pytest
 
-    - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b
+    - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a
       with:
         name: wheels-${{ inputs.os }}-${{ matrix.python-version }}-${{matrix.architecture}}
         path: ./onnx/dist
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 8fccf6e61e6..614abac6632 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -63,7 +63,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.0
+        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a
         with:
           name: SARIF file
           path: results.sarif