diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 7d2addd8..1b823a64 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -8,8 +8,8 @@ jobs:
     timeout-minutes: 60
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-node@v4
+    - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+    - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         node-version: lts/*
     - name: Install dependencies
@@ -18,7 +18,7 @@ jobs:
       run: npx playwright install --with-deps
     - name: Run Playwright tests
       run: npx playwright test
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
       if: ${{ !cancelled() }}
       with:
         name: playwright-report
diff --git a/package-lock.json b/package-lock.json
index 8de6bbbf..e42a83ea 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,8 +16,8 @@
         "notifications-node-client": "8.2.1"
       },
       "devDependencies": {
-        "@playwright/test": "^1.52.0",
-        "@types/node": "^22.16.0"
+        "@playwright/test": "1.52.0",
+        "@types/node": "22.16.0"
       }
     },
     "node_modules/@govuk-prototype-kit/step-by-step": {
diff --git a/package.json b/package.json
index 0266a5bc..96734782 100644
--- a/package.json
+++ b/package.json
@@ -16,7 +16,7 @@
     "notifications-node-client": "8.2.1"
   },
   "devDependencies": {
-    "@playwright/test": "^1.52.0",
-    "@types/node": "^22.16.0"
+    "@playwright/test": "1.52.0",
+    "@types/node": "22.16.0"
   }
 }