diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 970314b3..e04533d1 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -96,7 +96,7 @@ jobs:
           JETBRAINS_MARKETPLACE_SQUARE_PLUGINS: ${{ secrets.JETBRAINS_MARKETPLACE_SQUARE_PLUGINS }}
 
       - name: Upload plugin artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: idea-plugin
           path: ide-plugin/build/distributions/*.zip
@@ -118,7 +118,7 @@ jobs:
           fetch-depth: 0
 
       - name: Download plugin artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: idea-plugin
           path: idea-plugin