diff --git a/.github/workflows/audit-nais.yml b/.github/workflows/audit-nais.yml
index 1961541e0e7d..dda81b1a12fb 100644
--- a/.github/workflows/audit-nais.yml
+++ b/.github/workflows/audit-nais.yml
@@ -33,11 +33,11 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@4574d27a4764455b42196d70a065bc6853246a25 # ratchet:docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@5964de0df58d5ad28b04d8fe2e6b80ad47105b91 # ratchet:docker/setup-qemu-action@v2
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # ratchet:docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # ratchet:docker/setup-buildx-action@v2
       - name: Build and push
-        uses: docker/build-push-action@0adf9959216b96bec444f325f1e493d4aa344497 # ratchet:docker/build-push-action@v4
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # ratchet:docker/build-push-action@v4
         with:
           context: resources/pipeline/audit.nais
           platforms: linux/amd64, linux/arm64
diff --git a/.github/workflows/autotest.yml b/.github/workflows/autotest.yml
index bbffeb06e416..200ad32ef170 100644
--- a/.github/workflows/autotest.yml
+++ b/.github/workflows/autotest.yml
@@ -48,7 +48,7 @@ jobs:
           distribution: 'temurin'
           java-version: 21
       - name: Cache for maven dependencies autotest
-        uses: actions/cache@0c907a75c2c80ebcb7f088228285e798b750cf8f
+        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-autotest-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/report-and-notify.yml b/.github/workflows/report-and-notify.yml
index 42405d13e1f8..0fa4bad9850c 100644
--- a/.github/workflows/report-and-notify.yml
+++ b/.github/workflows/report-and-notify.yml
@@ -46,25 +46,25 @@ jobs:
           repository: 'navikt/fp-autotest'
       - name: Henter testresultat for fpsak
         if: ${{ !contains(inputs.fpsak, 'skipped') }}
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # ratchet:actions/download-artifact@v4
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # ratchet:actions/download-artifact@v4
         with:
           name: fpsak-testresultat
           path: .
       - name: Henter testresultat for fptilbake
         if: ${{ !contains(inputs.fptilbake, 'skipped') }}
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # ratchet:actions/download-artifact@v4
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # ratchet:actions/download-artifact@v4
         with:
           name: fptilbake-testresultat
           path: .
       - name: Henter testresultat for kalkulus
         if: ${{ !contains(inputs.fpkalkulus, 'skipped') }}
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # ratchet:actions/download-artifact@v4
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # ratchet:actions/download-artifact@v4
         with:
           name: fpkalkulus-testresultat
           path: .
       - name: Henter testresultat for verdikjede
         if: ${{ !contains(inputs.verdikjede, 'skipped') }}
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # ratchet:actions/download-artifact@v4
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # ratchet:actions/download-artifact@v4
         with:
           name: verdikjede-testresultat
           path: .