diff --git a/.github/download-boxes.sh b/.github/download-boxes.sh
index afaa5d38..00ca501f 100755
--- a/.github/download-boxes.sh
+++ b/.github/download-boxes.sh
@@ -10,8 +10,8 @@ YQ_BINARY=yq_linux_amd64
 GIT_ROOT=$(git rev-parse --show-toplevel)
 PROVIDER=virtualbox
 
-# gey yq used for filtering
-wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 -O /usr/bin/yq &&\
+# get yq used for filtering
+wget https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/${YQ_BINARY} -O /usr/bin/yq &&\
     chmod +x /usr/bin/yq
 
 # Read all boxes for all platforms from the "molecule.yml" files
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 6f550c28..a2e836fa 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -37,4 +37,4 @@ jobs:
           echo "::endgroup::"
 
       - name: Run pre-commit
-        uses: pre-commit/action@v3.0.0
+        uses: pre-commit/action@v3.0.0@646c83fcd040023954eafda54b4db0192ce70507 # 3.0.0