diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5f142f6..84c5c43 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,13 +2,13 @@ on: [push, pull_request]
 name: Test
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-large
     steps:
     - name: Install Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff  # v5
       with:
         go-version: '1.23.x'
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
       with:
          path: './src/github.com/segmentio/conf'
     - run: echo "PATH=$GITHUB_WORKSPACE/bin:$PATH" >> $GITHUB_ENV