diff --git a/.github/actions/report-scheduled-issue/action.yml b/.github/actions/report-scheduled-issue/action.yml
index 7573e2f39..f647eb251 100644
--- a/.github/actions/report-scheduled-issue/action.yml
+++ b/.github/actions/report-scheduled-issue/action.yml
@@ -13,7 +13,7 @@ runs:
   using: composite
   steps:
     - name: Report issue from a scheduled run
-      uses: slackapi/slack-github-action@v2.1.1
+      uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1
       with:
         webhook: ${{ inputs.slack-webhook }}
         webhook-type: incoming-webhook
diff --git a/package-lock.json b/package-lock.json
index 180d8ac82..b7a95615a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -44,7 +44,7 @@
         "globals": "17.5.0",
         "husky": "8.0.3",
         "jshint": "2.13.6",
-        "json": "^9.0.6",
+        "json": "9.0.6",
         "jsonlint": "1.6.3",
         "p-limit": "2.3.0",
         "p-queue": "3.2.0",
diff --git a/package.json b/package.json
index 2cf06c99a..6c6625c0d 100644
--- a/package.json
+++ b/package.json
@@ -79,7 +79,7 @@
     "globals": "17.5.0",
     "husky": "8.0.3",
     "jshint": "2.13.6",
-    "json": "^9.0.6",
+    "json": "9.0.6",
     "jsonlint": "1.6.3",
     "p-limit": "2.3.0",
     "p-queue": "3.2.0",