diff --git a/.github/workflows/dockerized-test.yml b/.github/workflows/dockerized-test.yml
index b507289..4115d12 100644
--- a/.github/workflows/dockerized-test.yml
+++ b/.github/workflows/dockerized-test.yml
@@ -20,10 +20,10 @@ jobs:
         ruby_version: ['3.3', '3.4']
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: Set up ruby
-      uses: ruby/setup-ruby@v1
+      uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1
       with:
         ruby-version: ${{ matrix.ruby_version }}
 
@@ -34,7 +34,7 @@ jobs:
       run: docker build . -t local/test -f Dockerfile.test --build-arg BASE_IMAGE=public.ecr.aws/lambda/ruby:${{ matrix.ruby_version }}
 
     - name: Run tests
-      uses: aws/containerized-test-runner-for-aws-lambda@main
+      uses: aws/containerized-test-runner-for-aws-lambda@511d270614f2c6b1613848db6dcf920a591c3c89 # main
       with:
         suiteFileArray: '["./test/dockerized/suites/*.json"]'
         dockerImageName: 'local/test'
diff --git a/.github/workflows/test-on-push-and-pr.yml b/.github/workflows/test-on-push-and-pr.yml
index b72af18..d13bb73 100644
--- a/.github/workflows/test-on-push-and-pr.yml
+++ b/.github/workflows/test-on-push-and-pr.yml
@@ -11,9 +11,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
     - name: Set up ruby
-      uses: ruby/setup-ruby@v1
+      uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1
       with:
         ruby-version: 3.1
     - name: Run 'pr' target
diff --git a/.gitignore b/.gitignore
index ba13ae8..bdd8bdf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,5 @@ Gemfile.lock
 .ruby-version
 # containerized test runner clone
 .test-runner/
+
+.vscode/
\ No newline at end of file